New to Meraki

[GlennGrossman]

Getting my first unit today. MX68. Need guidance in setting up RDP and port forwarding. Small office with 6 users which 3 will be using RDP into desktops. Any assistance would be greatly appreciated.

Thanks,

[ww]

https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings#Forwarding_rul...

[BrandonS]

My advice is not to do that. RDP is a very common attack vector to get yourself hacked and your data held for ransom.  Please use VPN or other more secure methods and use two factor authentication wherever possible for this type of access.  If you absolutely must open RDP on the public internet lock it down to only allow the specific IP addresses of users that need access.

Best.

[GlennGrossman]

Thanks for the reply.

If I use VPN, can users access their desktops?

Thanks.

[Slobs2]

Having users VPN in and RDP'ing to PC's is the only way I would allow that.

[BrandonS]

@GlennGrossman Sorry for the slow reply.  Yes, if you configure and then establish a client VPN connection to your MX the users can RDP to the internal IP address of their desktop.  I have no first hand experience with RDP gateway, but there exists such a thing as enforced two factor authentication for RDP that might be good too.  https://duo.com/docs/rdgateway