Forum Discussion

StefanKi's avatar
StefanKi
Iron Contributor
Nov 01, 2018
Solved

RDP gateway to secure rdp access to vm

Hello,

can I set up RDP gateway as Azure Service?

I like to secure my lab vm with rdp access. VPN is not so good, because I access the vms from different location and laptops.

 

Regards

Stefan

  • I was able to host the RDWeb page behind an AD Application Proxy and use Azure AD authentication before hitting the web page.  You can use AD App Proxy with the RD Gateway URL but not with authentication, it just acts as a reverse proxy.

4 Replies

  • Mark Dommisse's avatar
    Mark Dommisse
    Brass Contributor

    Hi Stephan,

     

    A good starting point is the following series of blogs by Arjan Vroege:

    https://www.vroege.biz/?p=2462

    https://www.vroege.biz/?p=2563
    https://www.vroege.biz/?p=2647

  • I was able to host the RDWeb page behind an AD Application Proxy and use Azure AD authentication before hitting the web page.  You can use AD App Proxy with the RD Gateway URL but not with authentication, it just acts as a reverse proxy.

    • StefanKi's avatar
      StefanKi
      Iron Contributor

      Hallo Travis, thanks for your response. Can you please give me more details. 

       

      Since yesterday I use Just in time access for secure my azure vm.

      • The AD Application Proxy acts as a hosted revers proxy service in Azure.  The downside is it requires Azure AD, so if you don’t have that it may not work for you.  I published the RD Web page through the Proxy to avoid opening ports on the firewall.  Users hit the proxy URL prior to the RDWeb page, forcing them to log in.

        If you are looking for one-off VM access, Just in Time is probably the better bet.  Microsoft has another product Remote Desktop Modern Infrastructure that will provide most of the RDP infrastructure as a service.  That’s still in private preview.

Resources