Wider attack surface coverage powered by hundreds of integrations and deeper threat visibility powered by thousands of detections.
Version : Microsoft Windows Server 2008 and later
Windows Server 2008 Terminal Services Gateway (TS Gateway) is a role service that enables authorized remote users to connect to resources on an internal corporate or private network, from any Internet-connected device that can run the Remote Desktop Connection (RDC) client. The network resources can be terminal servers, terminal servers running RemoteApp programs, or computers with Remote Desktop enabled.
Netsurion's Open XDR platform gathers and examines acquired logs to identify terminal server configurations, terminal server connections, terminal server desktop host activity. It generates reports for terminal services user session connected, user session disconnected, user authentication success, user authentication failed, and network traffic activity. It displays authentication success and failed with username’s, user session connected, and network traffic by systems. It alerts the users when terminal services gateway is shutting down and user authentication fails.
Netsurion Data Source Integrations for Terminal Services Gateway allows you to monitor the following components:
Once Terminal Services Gateway is configured to deliver events to Netsurion alerts, dashboards, and reports can be configured into Netsurion.
Some of the Data Source Integrations available in Netsurion are listed below.
The configuration details are consistent with Netsurion version 9.2 and later, and Microsoft Windows Server 2008 and later.
Download Integration Guide and How-to Guide for more information and to configuration instructions.