I'm looking for a solution to make remote desktop more secure. I'm looking for a fail2ban like for windows and specially for RDP which will block IP in firewall after N failed retries Any help?


For Windows, The most straightforward option out there (from the ones that I tested) is a commercial solution called RdpGuard.

There's also one solution called IPBan, although I never tried that one.

You can also secure RDP requiring client certificates, check this article.

More interesting articles about securing RDP against brute force attacks:

Automatically block RDP attacks on your Windows Server 2008

Automatically banning IPs with Windows Firewall after scanning the eventlog

  • I've been using RdpGuard for 6 months now, and it's great. It's cheap, and gives you the flexibility of blocking connections via either the Windows Firewall or IPSec policies.
    – Daniel.S
    Feb 16 '17 at 3:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.