Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

I'm looking for a solution to make remote desktop more secure. I'm looking for a fail2ban like for windows and specially for RDP which will block IP in firewall after N failed retries Any help?

share|improve this question

marked as duplicate by HopelessN00b, TomTom, Ward, Falcon Momot, Jenny D Jan 20 at 15:55

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

    
Why do you ignore the windows included mechanisms to protect RDP servers - i.e. TS Gateway? –  TomTom Jan 19 at 18:55

1 Answer 1

up vote 1 down vote accepted

For Windows, The most straightforward option out there (from the ones that I tested) is a commercial solution called RdpGuard.

There's also one solution called IPBan, although I never tried that one.

You can also secure RDP requiring client certificates, check this article.

More interesting articles about securing RDP against brute force attacks:

Automatically block RDP attacks on your Windows Server 2008

Automatically banning IPs with Windows Firewall after scanning the eventlog

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.