Downsides of Direct RDP over Internet

Forums › IT Pro and developers › Downsides of Direct RDP over Internet

1 | 2 | 3

Dynamic

4016 posts

Uber Geek
+1 received by user: 1853

ID Verified

Trusted

Lifetime subscriber

#2716001 31-May-2021 09:53

sparkz25:

Paul1977:

I personally suspect you don’t see it discussed as even a possible solution very often because (security implications aside) in most use cases, locking down to IPs isn’t useable for a mobile workforce. VPNs (in addition to having a high level of security) work extremely well for both mobile and home-based workers.

Have a look at Zerotier, we have been using it for some time now, and it's great! can host on some firewalls and also on Devices such as mobiles and PCs.

I think Todyl may be similar... a product I've been looking at seriously.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Paul1977

5171 posts

Uber Geek
+1 received by user: 2192

#2716141 31-May-2021 12:59

1101:

many companies use VPN to protect RDC's .
BUT , the staffer will often be using his home PC for remote access to work, the same PC that junior is using to run cracked games & go to porn sites
VPN gives the staffers INFECTED home PC direct access to the company network.

Best to restrict traffic via the VPN to RDP only if nothing else is required.

allan

2073 posts

Uber Geek
+1 received by user: 899

ID Verified

Lifetime subscriber

#2716239 31-May-2021 16:00

@Paul1977 also check out Thinfinity Workstation. Single licence free for home or commercial use - https://www.cybelesoft.com/thinfinity/remote-desktop/workstation/

MadEngineer

4591 posts

Uber Geek
+1 received by user: 2570

Trusted

#2716349 31-May-2021 19:00

Paul1977:

1101:

many companies use VPN to protect RDC's .
BUT , the staffer will often be using his home PC for remote access to work, the same PC that junior is using to run cracked games & go to porn sites
VPN gives the staffers INFECTED home PC direct access to the company network.

Best to restrict traffic via the VPN to RDP only if nothing else is required.

Correct. A properly configured firewall blocks everything except that which is expected. VPN service added for RDP? Then only RDP is allowed. "Staffer" should be provided with a work provided and secured device that Junior is not allowed to touch and if he does won't have admin rights regardless. Junior breaks the laptop out of AD? Then it can't connect to the VPN. Anti-virus not up to date even on a BYO device? VPN client will refuse to even make a connection.

You're not on Atlantis anymore, Duncan Idaho.

1 | 2 | 3