up vote 4 down vote favorite
2

This question already has an answer here:

I'm looking for a solution to make remote desktop more secure. I'm looking for a fail2ban like for windows and specially for RDP which will block IP in firewall after N failed retries Any help?

share|improve this question

marked as duplicate by HopelessN00b, TomTom, Ward, Falcon Momot, Jenny D Jan 20 '14 at 15:55

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • Why do you ignore the windows included mechanisms to protect RDP servers - i.e. TS Gateway? – TomTom Jan 19 '14 at 18:55
up vote 7 down vote accepted

For Windows, The most straightforward option out there (from the ones that I tested) is a commercial solution called RdpGuard.

There's also one solution called IPBan, although I never tried that one.

You can also secure RDP requiring client certificates, check this article.

More interesting articles about securing RDP against brute force attacks:

Automatically block RDP attacks on your Windows Server 2008

Automatically banning IPs with Windows Firewall after scanning the eventlog

share|improve this answer
  • I've been using RdpGuard for 6 months now, and it's great. It's cheap, and gives you the flexibility of blocking connections via either the Windows Firewall or IPSec policies. – Daniel.S Feb 16 '17 at 3:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.