Protect your RDP from brute-force attacks. Stop RDP, MSSQL, FTP brute-force. Fail2ban for Windows.
RdpGuard
Intrusion prevention system for your Windows Server
 
Follow:
Share:

What is RdpGuard and How does it Work?

RdpGuard is a host-based intrusion prevention system (HIPS) that protects your Windows Server from brute-force attacks on various protocols and services (RDP, FTP, IMAP, POP3, SMTP, MySQL, MS-SQL, IIS Web Login, ASP.NET Web Forms, MS Exchange, RD Web Access, VoIP/SIP, SSH, etc).

It monitors the logs on your server and detects failed logon attempts. If the number of failed logon attempts from a single IP address reaches a set limit, the attacker's IP address will be blocked for a specified period of time.

For Windows Vista/7/8/10/11 and Windows Server 2008/2012/2016/2019/2022

Attacker's IP address blocked via Windows Filtering Platform.

Attacker's IP addresses are blocked automatically. Click image to view other screenshots.

Why do you need it?

Many Windows Server machines are under constant attack. Network scanners and RDP brute-force tools work 24/7. Eventually they may find a password to access your server! Moreover, RDP brute-force attacks abuse server resources (CPU, RAM, Disk Space and Network Bandwidth).

Take a look at your server's Security EventLog. How many failed login attempts do you see? The log may note thousands of failed login attempts from a single IP address. This means that someone is trying to find a password to access your server.

RDP brute-force attempts in Windows System Security event log

This is how RDP brute-force attacks appear in the Security event log.

How can you protect your server from brute-force password-guessing attacks on RDP? The answer is RdpGuard - powerful tool that allows you to protect your Remote Desktop from brute-force attacks.

RdpGuard runs as a Windows Service. Your Windows Server is protected even if no one is logged on.

Attacker's IP address blocked via Windows Filtering Platform.

Attacker's IP Address was blocked by RdpGuard. Attacker is unable to connect protected server anymore.

For Windows Vista/7/8/10/11 and Windows Server 2008/2012/2016/2019/2022

12 Jul, 2023 - RdpGuard Version 9.0.3 Released

  • Added SmarterMail support for IMAP, POP3 and SMTP
  • Improved support for Microsoft Exchange Server
  • Added the ability to block TOR exit nodes
  • Improved username detection for MailEnable
  • Improved detection of SMTP username enumeration for hMailServer
  • Added support for the X-Forwarded-For Header in the RD-WEB engine
  • Various internal improvements and bug-fixes

26 Apr, 2023 - RdpGuard Version 8.8.3 Released

  • Fixed an issue with audit settings detection on domain machines
  • MSSQL - restored support for 17832 and 17836 events (probe attempts)
  • Fixed an issue with SMTP protocol in Exchange engine
  • Fixed display issue for IMAP and SIP links on localized Windows editions

21 Apr, 2023 - RdpGuard Version 8.7.3 Released

  • Maintenance release
  • Restored Windows Server 2008 support
  • Improved compatibility for FTP engine
  • Minor UI improvements and bug-fixes
  • Internal improvements and bug-fixes
More news..
RdpGuard 9.0.3 Free Trial

RdpGuard protects:

Social Connection
RdpGuard Logo
 
People like RdpGuard!
Our Other Products
FastGlacier
Windows Client for Amazon Glacier - new low-cost storage for data archiving and backup.
Copyright © 2012-2023 NetSDK Software. All rights reserved.  Terms of Use.  Privacy Policy.