RDP - How Secure?

[rflora]

Hello all,

A client has opened up RDP ports on the firewall to access their workstations/servers from the net. Is this advisable? What are the security implication?

Thanks.

 

[biglebowski]

I would never advise opening RDP to the outside world. if they want to rdp servers externally tell them to use a vpn.

When I was born I was so suprised I didn't talk for 18 months

 

[porkchopexpress]

If the firewall is providing a vpn service and maybe RADIUS auth then it's not really a problem.

 

[Hondy]

as well as VPN access you can tie VPN access down to a particular IP or ISP's netblock for an extra layer of security.

I wouldn't allow access directly to RDP from the net because you generally want to avoid internet access to remote control services in case a vulnerability appears in RDP or it is brute forced. Its just generally a bad plan, go with the VPN access.

 

[rflora]

Thanks for the replies. Much appreciated.