I need to allow all (or network group) my LAN users to be able to RDP to external destinations. Is it possible to simply allow RDP outbound without compromising security.
Cheers
This thread was automatically locked due to age.
I need to allow all (or network group) my LAN users to be able to RDP to external destinations. Is it possible to simply allow RDP outbound without compromising security.
Cheers
Well, everything is a compromise, Richard. [;)]
Unless you allow inbound RDP with a NAT rule, allowing RDP out for internal users should be a minimal risk.
Cheers - Bob
You wouldn't really compromise security on your side of the connection (RDP going OUT), but I wouldn't want my network to accept RDP in from the internet.....
RDP connections should IMHO be behind a VPN-connection.
Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.