This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Allow LAN Users RDP to External Destinations

I need to allow all (or network group)  my LAN users to be able to RDP to external destinations. Is it possible to simply allow RDP outbound without compromising security. 

Cheers



This thread was automatically locked due to age.
  • Well, everything is a compromise, Richard. [;)]

    Unless you allow inbound RDP with a NAT rule, allowing RDP out for internal users should be a minimal risk.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • You wouldn't really compromise security on your side of the connection (RDP going OUT), but I wouldn't want my network to accept RDP in from the internet.....

    RDP connections should IMHO be behind a VPN-connection.


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.