NAT issues...

[sankarmay]

Hi Team,

If you are using nat for RDP how it will be safe in cisco devices ?

Anyone whose know the ip can able to access the devices.

Please anyone explain to me.

[omz]

Hi

I am not sure if this is a nat issue. This is about securing RDP.

Anyone who knows the IP can reach the host but still needs to login.

Use strong passwords. Don’t allow defaul admin account access, create user to allow RDP. 

Change the RDP port from default 3389 to something else. 

Best practice is to have a Remote Desktop Gateway.

On Cisco, you can you use access-list to limit access from specific IP addresses or range. 

HTH

[paul driver]

Hello

FYI - Nat isn't a security feature, even it may seem to be so as it hides the original source address but in reality its only a feature introduced to negate the exhaustion of ipv4 addressing.

It can as you may know allow a range of private non routable address to be mapped either a single or multiple routable addresses so the idea it would and has slowed down the depletion and conserved the ipv4 public address space.