@GlennGrossman Sorry for the slow reply. Yes, if you configure and then establish a client VPN connection to your MX the users can RDP to the internal IP address of their desktop. I have no first hand experience with RDP gateway, but there exists such a thing as enforced two factor authentication for RDP that might be good too. https://duo.com/docs/rdgateway
... View more