topic Best way to prevent brute force attacks (LDAP) on public facing Microsoft RDWeb login page in General Topics

Best way to prevent brute force attacks (LDAP) on public facing Microsoft RDWeb login page

Ebernardo — Tue, 14 Mar 2017 17:09:57 GMT

We are using Server 2012r2 RDS gateway and have the PA configured to with a security policy to allow the untrusted traffic (ssl, rds, http) that is NATed to the internal rds gateway. We are seeing a lot of failed audits in the logs on the terminal server. What is the best way to prevent brute force attacks for logins to Active Directory?

Re: Best way to prevent brute force attacks (LDAP) on public facing Microsoft RDWeb login page

BPry — Tue, 14 Mar 2017 19:23:08 GMT

Ideally you would setup a DoS classified profile and set the limits that you feel are required.

Just as a side note though there are plenty of products and open source projects that could be setup to read your failed login attempts and once they pass a set threshold feed into a list that you could use as an EBL on the firewall to build a security policy. Just a thought.