Firewall & Network Security
Close exposed remote desktop access, on site
Staff log into the office server from home through a port that is open to the whole internet.
Staff log into the office server from home through a port that is open to the whole internet.
Forwarding port 3389 straight to a server or PC was a common shortcut for remote work, and it is one of the most common ways ransomware gets into small businesses. Automated scanners find open remote desktop ports quickly and try passwords around the clock. Even a strong password is exposed to new flaws in the service itself. Account lockout policies help, but they do not close the door.
What the technician does
- Confirm which ports and services are reachable from outside
- Set up a VPN or secure gateway with multi-factor sign-in
- Close the open port and test remote access through the new route
Check your server's sign-in logs - repeated failed logins from overseas are a sign the port is being found.
About close exposed remote desktop access
We replace direct exposure with a VPN on the firewall, using multi-factor sign-in, so remote desktop only answers to people who have already authenticated. Where a VPN is not practical we look at a remote desktop gateway or cloud alternatives. Once remote staff are connected the new way, the port forward is removed, and we check from outside that nothing is still listening.
What usually causes it
- Remote work set up quickly with a port forward
- A software vendor asked for direct remote access
- Failed login attempts filling the server's security log
- An insurer's scan flagged an open remote desktop port
Before we arrive
- Admin logins for the current router or firewall, if you have them
- Your internet provider's account details and connection type
- A list of anything that must be reachable from outside, such as a camera recorder or accounting server
- Names of staff who work remotely and the devices they use
What a visit looks like
When you book close exposed remote desktop access, you tell us what's going on and we reply with a time that suits you and a price. Nothing starts until you're happy with both.
On the day, the technician arrives, looks at the problem in person and confirms the plan with you before starting. If something turns out different from what was expected - a part is needed, or the cause is somewhere else - we stop and agree the change with you first.
When the work is done we test it with you, show you what was changed, and leave the area tidy. For business jobs we note what we did, so there is a record for whoever looks after your IT next.
Pricing
Each close exposed remote desktop access job is priced before work starts. The price depends on what's involved - the size of the site, the equipment, and whether parts are needed - so the quickest way to a number is to tell us about the job on the booking form.
There is no contract and no monthly fee. You book the job you need and pay for that job.
Close exposed remote desktop access: questions
Is changing the port number enough?
No. Scanners check every port, so a non-standard number only delays discovery. The service is still exposed to password guessing and software flaws. Putting it behind a VPN with multi-factor sign-in removes it from the internet entirely.
Will staff find the VPN harder to use?
It adds one step: connect the VPN, approve the sign-in, then open remote desktop as before. Most staff are comfortable with it after the first connection, and we set it up on their laptops with them.
Do you do close exposed remote desktop access on site?
Yes. We come to businesses and homes across Auckland and Hamilton and do the work where the equipment is.
How much does close exposed remote desktop access cost?
It depends on what's involved. Tell us about the job on the form and we'll confirm the price before any work starts.