Score:0

Is it safe to use Internet-facing RDP in combination with IP-whitelisting on Windows Firewall?

in flag

I am using a VPS that I connect to using RDP over the internet. Since I was experiencing an incessant stream of brute force attacks on the RDP, I configured the windows firewall to only allow certain IP-addresses to connect. This seems to work like a charm as the Failed Audit Log stays clean now. Yet I wonder if this practice is in fact secure.

Score:0
cn flag

Multiple security controls are always better than one. Defense in depth.

Review MITRE's index of remote desktop protocol and its citations. Consider some of the ways to improve detection and mitigation.

  • Audit users allowed to RDP
  • Network segmentation (your firewall rules fall in this category)
  • Bastion host, possibly using an implementation of remote desktop gateway protocol
  • Multi-factor authentication
  • Review login sessions
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.