RDP, IT Atlas

Overview

RDP supports network level authentication, TLS transport and gateway brokering. Session hosts can be pooled for multi user desktop services or published per application.

Internet exposed RDP is one of the most reliably exploited services in existence. Publish it only through a gateway or Zero Trust broker, with MFA and account lockout in place.

Security considerations

Never expose 3389 directly; require a gateway plus phishing resistant MFA.
Restrict who may log on remotely and monitor for password spraying against exposed gateways.

Related topics

VPN

A virtual private network carries private traffic across untrusted networks inside an authenticated, encrypted tunnel.

Zero Trust

A security model that removes implicit trust based on network location and instead verifies every request explicitly against identity, device and context.

Windows

The dominant enterprise client and server operating system, with a deep security stack and a long history of compatibility requirements.

Privileged Access Management

Controlling, brokering, recording and time limiting administrative access to the systems that can change everything else.