What level of access is granted to the vendor?
You are always in complete control. Each application is configured at the port level with exactly the services a vendor rep requires and nothing else. You may enable access to any TCP-based service, including FTP, telnet, desktop sharing, RDP, Terminal Services, pcAnywhere, databases, web servers, etc.