RDP Shield

RDP Shield is designed to provide a reliable, yet easy to use security solution against brute force RDP attacks, preventing cyber criminals from accessing your system. Such an intrusion attempt is betrayed by repeated login failures from the same IP address to a server, which is a more than clear sign that someone from the outside is trying to hack into a system.

By default, RDP Shield runs as a Windows service, also providing quick access to its configuration settings via a system tray menu.

Its functioning principle is simple: it constantly monitors the system and its event log in order to detect repeated login failures and if the attempts are sourced from the same IP address, it tries to immediately block it. This way, you can stay assured that the system is much more difficult to break in.

Configuring the application's behavior is done from a simple interface, where you can set the maximum number of failed login attempts before the source IP address is automatically blocked by RDP Shield and the time interval to consider when counting the retries. The number of minutes an address will be blocked for is also customizable.

Other options enable you to access the activity log or flush all the blocks with the push of a button. On the downside, there are no options for creating an exclusion list to include IP addresses you trust.

The number of brute force attacks targeted towards a RDP server is constantly increasing, but note that alongside a reliable intrusion prevention system such as RDP Shield, some additional measures are a must in order to restrain attack attempts. To name some, complex passwords , rigorous group policies, two-factor authentication are a must to secure your server.