Configure automatic IP blocking, keep trusted users connected and review Remote Desktop activity from a focused Windows management interface.
Monitor observed TCP connections on your configured RDP port, including activity that does not generate a failed-login event. Set connection thresholds and ban durations to reduce repeated unwanted traffic before a valid sign-in.
Set thresholds for failed sign-ins from individual public IPs. A distributed detector also correlates multiple sources targeting the same account, helping you respond when attempts are spread across different addresses.
Choose the countries your organization needs. VARQOO evaluates observed public source IPs and creates individual firewall blocks for unauthorized locations, so geographic restrictions complement your login thresholds.
Add trusted IP addresses to your allowlist and remove blocks from the management interface when access requirements change. Private and local addresses are excluded from automatic bans to protect internal connectivity.
Review successful authentication, failed sign-ins and blocked activity alongside service and license status. Use the activity history to understand why a source was blocked and adjust your configuration for the server's normal usage.
Run protection as a Windows service and apply rules through native Windows Firewall APIs. VARQOO works with your Remote Desktop service without adding a proprietary RDP proxy.
Central reputation is being validated to supplement local detection with independently corroborated high-risk sources. Availability will be announced when the operational rollout is ready.
Learn the differences between brute force, Password Spray, distributed attempts and connection flooding in our RDP security guide.
We use optional analytics cookies to understand how VARQOO is used and improve the website. You can accept or reject analytics cookies. Cookie policy.