Remote Desktop Protocol

aliases:

• RDP

An application protocol for operating remote connections to a host using a graphical interface.

RDP runs over 3389/tcp. RDP was first used in Microsoft-Windows for remote access and management. It has encryption and authentication features.

Network Level Authentication (NLA)

NLA protects RDP servers against DoS attacks. Without NLA, the system configures a desktop before the user even logs on. This lets attacks try to attempt connections multiple times, eating resources with each attempt. NLA forces authentication before committing any resources to the session.

Compromised systems contain vulnerable credentials. This risk can be mitigated using RDPRA and Remote Credential Guard.