Untangle: Protect Remote Desktop Server

Minimum

• RDP Guard
• Duo Security
• Lockout policy on user accounts (Active Directory or Jump Cloud)

Enhanced

• Restrict IPs by adding source address in port forwarding rule 

- and/or -

• Set up VPN (WireGuard, IPSec) for mobile/remote users (both in case user has issue with the other)