Protecting Remote Desktops at Scale with Cloudflare Access

On August 7, 2020, Cloudflare introduced Argo Tunnel RDP Bastion mode to simplify protecting Remote Desktop Protocol (RDP) connections at scale. This new feature functions as a jump-host and can reside on a single node in the network, eliminating deployment headaches. The adoption of remote work increased significantly due to the COVID-19 pandemic, leading to an increase in RDP usage. However, many organizations have misconfigured RDP, exposing their systems to potential attacks. Cloudflare Access adds stronger authentication to RDP sessions by first locking down access and enforcing identity-based policies. The new bastion mode allows users to reach any machine through a single cloudflared instance, making it easier for organizations to protect internal resources.