The Cloudflare Blog: RDP without the risk: Cloudflare’s browser-based solution for secure third-party access

Mar 21, 2025

—

Source URL: https://blog.cloudflare.com/browser-based-rdp/
Source: The Cloudflare Blog
Title: RDP without the risk: Cloudflare’s browser-based solution for secure third-party access

Feedly Summary: Cloudflare now provides clientless, browser-based support for the Remote Desktop Protocol (RDP). It enables secure, remote Windows server access without VPNs or RDP clients.

AI Summary and Description: Yes

**Summary:** This text discusses Cloudflare’s latest feature, browser-based Remote Desktop Protocol (RDP) access, which integrates Zero Trust Network Access (ZTNA) for secure remote access to Windows servers. This innovation provides enhanced security, ease of use, and compliance support, addressing significant security challenges associated with RDP.

**Detailed Description:**

Cloudflare has introduced a browser-based RDP solution as part of its Access for Infrastructure service. This development allows organizations to securely connect to Windows servers without the need for traditional RDP clients or VPNs, adhering to modern security best practices. Here are the main points covered in the text:

– **Context and Importance of RDP:**
– RDP has been a longstanding method for accessing Windows servers, essential for many organizations and remote workforce integrations.
– However, RDP is plagued by security issues, including weak credentials and unprotected port access, making it a target for attacks.

– **Security Threats Associated with RDP:**
– Notable vulnerabilities, like BlueKeep, can lead to unauthorized access and lateral movement within networks, emphasizing the need for stronger security measures.
– RDP’s history of being exploited in ransomware attacks has earned it the nickname “Ransomware Delivery Protocol.”

– **Cloudflare’s Innovation:**
– The browser-based RDP access leverages IronRDP to encapsulate RDP sessions over secure WebSocket connections, thus eliminating traditional client software requirements.
– This solution aims to mitigate RDP’s security vulnerabilities while providing high performance and ease of management.

– **Enhancements in Security Control:**
– The architecture includes advanced security features, such as fine-grained authentication that supports Single Sign-On (SSO), Multi-Factor Authentication (MFA), and integration with identity providers.
– The solution ensures that outdated and less secure protocols and methods are not used or allowed in RDP sessions.

– **Operational Benefits:**
– Users can access RDP servers directly from their browsers without the need for additional software installation, thereby reducing operational overhead.
– Cloudflare’s global network supports low latency and high performance, ensuring better user experience while using RDP.

– **Compliance and Future Developments:**
– This feature is part of Cloudflare’s effort to secure sensitive infrastructure access and aims to achieve FedRAMP High certification, which will validate its compliance with stringent security and privacy standards.

– **Future Enhancements:**
– Plans are in place to further improve RDP access features, including advanced user authentication methods and increased visibility for session monitoring.

**Conclusion:** Cloudflare’s browser-based RDP access represents a significant step forward in providing secure, efficient remote access to Windows servers, making it attractive for organizations focused on maintaining compliance and enhancing cybersecurity measures in today’s digital landscape. The integration of modern security controls in a user-friendly format could set a new standard in RDP access solutions, signaling a necessary evolution in infrastructure security practices.

a access Access for Infrastructure Act advanced security AI and Arch architecture art as attack attacks authentication authentication methods based based support being Best best practices browser by C certification challenges CIA client clients Cloud Cloudflare co Col compliance compliance support Context control controls credential credentials cyber cybersecurit Cybersecurity cybersecurity measures D day de Desktop development digital digital landscape e EDR efficient end enhanced security exp experience exploit fact factor authentication factor authentication (MFA) feature features FedR FedRAMP fine focused for friendly future future developments g Gen git global network gs H high HR http HTTPS identity identity provider identity providers in infrastructure infrastructure security innovation installation integration integrations Iron ite k l land latency lateral movement led Li long low low latency making man management MFA Mode Modern modern security Monitor monitoring multi multi-factor authentication Multi-Factor Authentication (MFA) N NCA network network access networks no o of on operation operational benefits operational overhead OPM organization organizations ory out over party performance point pre privacy privacy standards protocol protocols R rag ransom ransomware ransomware attack ransomware attacks rate RCE RDP red Remote Access remote desktop remote desktop protocol remote work remote workforce Requirements Risk Ro RoT Rust s sec secure secure protocols secure remote access security security best practices security challenges security controls security features security issues security measure security measures security practices security threat security threats Security Vulnerabilities server servers service session monitoring Sig Signal single single sign single sign-on Single Sign-On (SSO) SoC software software installation solutions source SSE SSO standards T test text the third third-party third-party access threat threats to Tor TP trust two UI unauthorized access up US use user user authentication user experience user-friendly Users uth V val visibility VPN vulnerabilities Ware web websocket WebSocket connections Wi Wind Windows workforce x zero Zero Trust Zero Trust Network Access ZTNA