{"id":48103,"date":"2022-04-13T09:25:01","date_gmt":"2022-04-13T01:25:01","guid":{"rendered":"https:\/\/version-2.com\/?p=48103"},"modified":"2022-08-30T19:02:19","modified_gmt":"2022-08-30T11:02:19","slug":"mfa-on-rdp-what-are-the-options","status":"publish","type":"post","link":"https:\/\/version-2.com\/zh\/2022\/04\/mfa-on-rdp-what-are-the-options\/","title":{"rendered":"MFA on RDP: what are the options?"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\"\"<\/p>\n

RDP (Remote Desktop Protocol) is one of the most used technologies for access to server based applications or desktops and to enable remote user access. Unfortunately, using RDP in its simplest forms is a huge security risk. The UK NCSC (National Cyber Security Centre) has identified unprotected RDP to be the #1 reason for ransomware attacks (more on this topic). And these antics take can take place really, really fast\u2026<\/p>\n

A \u201choneypot\u201d experiment from Unit 42 in the summer of 2021 found that 80% (!) of its unprotected RDP setups was hacked within 24 hours. Ouch. And these attacks are not isolated: on average, the honeypot RDP environments are attacked every 11 hours.<\/p>\n

Multi-factor authentication<\/p>\n

One of the recommendations to protect RDP environment from getting hacked is to add MFA (Multi-Factor Authentication). Note that this is one of but far from the only recommendation.<\/p>\n

You\u2018d think the fact that many businesses are not using MFA on top of the RDP today is because there is a lack of solutions. However, the opposite is true: the number of options in the MFA space are as plenty as there are fish in the ocean. At Awingu, we also provided built-in MFA capabilities as part of the product since day 1.<\/p>\n

The purpose of this post is to bring some structure into your options. We\u2019ll add some specific vendor solutions, but keep in mind that there are many players in this domain. Rather than comparing vendors, let\u2019s look into the architecture, the complexity of setup and the cost elements in play. We\u2019re not making any analysis (or judgement) on which MFA token generation is better than other in this blog: e.g. is SMS as a token as secure as a time-based token generated on a phone?, etc.<\/p>\n

The high-level options of MFA<\/p>\n

On the highest level, MFA can be added on top of RDP by using:<\/p>\n