There are a number of things to do to get better security on remote connections
* Putting the RAS servers on one or more own interfaces in the firewall
* Be sure to turn on auditing for the RAS function
* Enable authentication
* Enable session encryption
* Enable dialback
* Specify which hours remote users are allowed
To turn on auditing for RAS, use the regedit utility to set the key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters\Logging
to 1, then restart RAS.