I plan to have two office locations connected through an IPSec VPN tunnel using two PIX 501 firewalls. The cIients need to access a Win2K Terminal Server in one of the locations. Do I need to explicitly open TCP port 3389? I know I'd have to open the port, if access came from outside the VPN. But within the VPN (LAN-to-LAN)?
J.