The Remote Desktop Protocol (RDP) makes it possible for employees to connect to their work desktop computer when they work remotely.
After reading this article you will be able to:
Related Content
Subscribe to theNET, Cloudflare's monthly recap of the Internet's most popular insights!
Copy article link
The Remote Desktop Protocol (RDP) is a protocol, or technical standard, for using a desktop computer remotely. Remote desktop software can use several different protocols, including RDP, Independent Computing Architecture (ICA), and virtual network computing (VNC), but RDP is the most commonly used protocol. RDP was initially released by Microsoft and is available for most Windows operating systems, but it can be used with Mac operating systems too.
Remote desktop is the ability to connect with and use a faraway desktop computer from a separate computer. Remote desktop users can access their desktop, open and edit files, and use applications as if they were actually sitting at their desktop computer. Employees often use remote desktop software to access their work computers when they are traveling or working from home.
Remote desktop access is very different from cloud computing, even though both allow employees to work remotely. In cloud computing, users access files and applications that are stored in the cloud — specifically, in cloud servers. In contrast, when using remote desktop software, users are actually accessing their physical desktop computer, and can only use files and applications saved locally on that desktop. Cloud computing is sometimes easier to use and more efficient to implement for remote workforces, but many companies have not migrated to the cloud, or cannot for security or regulatory reasons.
Think of a remote-controlled drone or toy car. The user presses buttons and steers the drone or car from afar, and their commands are transmitted to the vehicle. Using RDP is somewhat like that: the user's mouse movements and keystrokes are transmitted to their desktop computer remotely, but over the Internet instead of over radio waves. The user's desktop is displayed on the computer they are connecting from, just as if they were sitting in front of it.
The RDP protocol opens a dedicated network channel for sending data back and forth between the connected machines (the remote desktop and the computer currently in use). It always uses network port 3389 for this purpose. Mouse movements, keystrokes, the desktop display, and all other necessary data are sent over this channel via TCP/IP, which is the transport protocol used for most types of Internet traffic. RDP also encrypts all data so that connections over the public Internet are more secure.
Because keyboard and mouse activity has to be encrypted and transmitted over the Internet, which takes a few milliseconds, and because the desktop display has to be transmitted back to the user, slight delays often occur. For instance, if a user double-clicks on an application to open it, the "double click" may not take place for a few milliseconds as the user's action is transmitted to the desktop before being carried out. Then, when the application opens, there may be another short delay while the display is transmitted back to the user.
There are several advantages to RDP. One advantage is that it does not require a VPN. It also keeps data stored securely on the user's desktop, instead of storing it on cloud servers or on the user's unsecured personal devices. Furthermore, RDP enables companies with a legacy on-premises IT setup to allow their employees to work from home.
However, RDP may cause users to experience lag, especially if their local Internet connection is slow. This can frustrate remote employees and cut down on their productivity. RDP also has some serious security vulnerabilities that leave it open to cyber attacks. (Learn more about RDP security.)
Cloudflare offers clientless, browser-based RDP access with Access for Infrastructure, part of our SASE platform. This applies Zero Trust policy controls to RDP while allowing external parties like contractors to access remotely without installing software or being issued company devices. A remote contractor (or employee on a personal machine) can simply log in through their browser, and Cloudflare keeps the RDP connection secure.
Learn more about RDP with Access for Infrastructure.
The Remote Desktop Protocol (RDP) is a technical standard used to operate a computer from a remote device. It allows users to see their desktop display and interact with their local applications and files as if they were physically sitting in front of the machine.
In cloud computing, users interact with applications and data stored on remote cloud servers. In contrast, RDP allows users to access a physical desktop computer and utilize only the files and applications saved locally on that specific machine. While cloud computing is often more efficient for large remote workforces, some companies continue to use RDP due to regulatory requirements or legacy on-premises setups.
When a user moves their mouse or types on their keyboard, those commands are transmitted over the Internet to the remote desktop. To facilitate this, RDP opens a dedicated network channel using port 3389 to send data back and forth via TCP/IP. All RDP commands are encrypted.
RDP encrypts all data sent over its dedicated network channel to protect connections over the public Internet. However, RDP does have some security vulnerabilities, including the BlueKeep vulnerability, and even encrypted protocols can never be considered completely secure.
RDP is beneficial because it enables remote work without requiring a VPN and keeps data stored on the secure corporate desktop rather than on an employee's personal device. On the downside, slow Internet connections can lead to frustrating performance delays, and the protocol has security vulnerabilities that can be targeted by cyber attacks.
Cloudflare provides a more secure way to use RDP by applying Zero Trust policy controls through its SASE platform. This clientless approach allows employees or contractors to access their remote desktops directly through a web browser, eliminating the need to install specialized software or use company-issued devices to maintain a secure connection.