How to block RDP over https

[itagsupp1]

We want to block RDP over https. 

Is there any way to do this?

Any help is greatly appreciated!

Best regards

Andreas

[asabban]

Hello,

I think there might be several ways to get RDP traffic through MWG. One could do a CONNECT and tunnel the connection through the HTTPS Proxy. This should not work in case SSL inspection is done, since MWG will notice there is no HTTP traffic in the tunnel and block non-HTTP traffic.

There is also a service "RDP over HTTPS", where it seems you connect to a service via HTTPS and from there RDP is done into the internal network. In case SSL Scanner is enabled it should be possible the check the URLs and see if there is a specific pattern we can apply to block the request.

Best,
Andre

[itagsupp1]

Hello Andre,

thanks for your hints! But can you please be a bit more specific about "RDP over HTTPS"? About how to find and use? That would be great!!

Thanks again

Andreas