Can I safely use remote login to a Windows server from the Internet via RDP?

Question

System administration

Is it safe to open rdp windows server port for internet access??

Answer 1

You can:
1.enable network level authentication 2.do not
use a self-signed certificate (create your own CA, generate certificates for the server and clients on it)
3.use only strong encryption protocols
4.enable client authentication
5.change the default RDP port - optional
Here everything is not badly described.
In general, these are general methods for securing any connection (not just RDP) using SSL/TLS.

Answer 2

do filtering by static IP addresses, firewall or router

Answer 3

Be sure to set up two-factor login for RDP connections. The easiest with Rohos (paid) -
www.rohos.ru/2015/03/terminal-server-login-by-sms-otp

Answer 4

Can.
It all depends on how critical it is.
In some cases, the default setting is sufficient.
In some cases, security is further enhanced.
For example, using port knocking, IP restrictions, in some cases even VPNs are wrapped.

Answer 5

https://sysadmins.ru/topic495465.html

Answer 6

Use RD Gateway to access:
https://docs.microsoft.com/en-us/windows-server/re...