+SYS.2.2.3.A19 Security During Remote Access Using RDP [User] (S)

SYS.2.2.3.A19 Security During Remote Access Using RDP [User] (S)

The effects on the configuration of the local firewall SHOULD be taken into account when planning remote access. The group of users authorised for remote desktop access (RDP) SHOULD be specified by assigning corresponding user rights. In complex infrastructures, it SHOULD only be possible to reach an RDP target system via an intermediate RDP gateway. In order to use RDP, a check SHOULD be performed to ensure that the following convenience functions are in accordance with the protection needs of the target system:

  • Use of the cache
  • Integration of printers
  • Integration of removable media and network drives
  • Use of file repositories and smartcard connections

If the use of remote desktop access is not planned, it SHOULD be disabled completely. The cryptographic protocols and algorithms deployed SHOULD comply with the respective organisation's internal specifications.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems