Stop Using RDP for Remote Access

Stop Using RDP for Remote Access

In today’s ever-changing hybrid and remote working environments, it’s often necessary for users to connect back to their company-issued desktop PC sitting on their desk. This might be due to a custom security configuration, specialized software, or restricted access to sensitive data. Regardless of the need, a popular way of establishing this connection is through a remote desktop connection utilizing the Microsoft standard protocol of Remote Desktop Protocol or RDP.

But a recent joint warning from the FBI, along with the US Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre (ACSC) indicate that attacks against this popular connection method are on the rise, getting more sophisticated, and seeing some breaks in the connection encryption.

Source: https://www.theregister.com/2023/05/17/fbi_cisa_bianlian_advisory/

So what other options exist? Luckily, there is a large list of options available from different vendors, but which is best and more importantly, which provides the best security and performance for users? Here is a comparison chart of some of a few of the most popular options:

One of the challenges with all remote desktop solutions is maintaining high levels of security without compromising user experience. These are some of the common security concerns when providing users with remote access to desktops:

Authentication and Access Control: Ensuring proper authentication mechanisms and access control is crucial to prevent unauthorized access to remote desktops. Weak passwords or inadequate authentication protocols can pose security risks.

Data Encryption: Remote desktop solutions should employ strong encryption methods to protect data transmitted between the local and remote systems. Without proper encryption, sensitive information can be intercepted and compromised.

Endpoint Security: The security of the local device accessing the remote desktop is vital. If the local device is infected with malware or compromised, it can potentially compromise the security of the remote desktop environment as well.

Network Security: Remote desktop connections often rely on network infrastructure that may be susceptible to security breaches. Employing secure network protocols and implementing appropriate network security measures, such as firewalls and VPNs, is crucial to protect against unauthorized access or data interception.

Auditing and Monitoring: It is important to have mechanisms in place to monitor and log remote access sessions. This helps in detecting any suspicious activity, identifying potential security breaches, and ensuring compliance with security policies.

Third-Party Security: When using remote desktop solutions, it’s essential to consider the security practices and track record of the solution providers. Ensure that they follow industry best practices, regularly release security updates, and have a robust vulnerability management process.

Session Hijacking: Remote desktop sessions can be vulnerable to session hijacking attacks, where an attacker takes control of an active session. Implementing techniques like session encryption, session timeouts, and regularly rotating session IDs can mitigate the risk of session hijacking.

Data Leakage: Remote desktop solutions may allow file transfer between local and remote systems. Ensuring proper controls and policies are in place to prevent unauthorized or accidental data leakage is important to protect sensitive information.