---
names:
  full: "Azure Network Security Group allows public access to RDP port"
  contextual: "Security Group allows public access to RDP port"
description: >
  Ensure that Azure Network Security Groups do not allow unrestricted public RDP (port 3389) traffic.
type: COMPLIANCE_POLICY
categories:
  - SECURITY
frameworkMappings:
  - "/frameworks/cis-azure-v6.0.0/07/01"
  - "/frameworks/iso-iec-27001-2022/05/10"
  - "/frameworks/iso-iec-27001-2022/05/15"
  - "/frameworks/iso-iec-27001-2022/08/03"
  - "/frameworks/iso-iec-27001-2022/08/04"
  - "/frameworks/cloudaware/resource-security/network-exposure"
  - "/frameworks/hipaa-security-rules/164-312/e-01"
  - "/frameworks/iso-iec-27001-2013/09/01/02"
  - "/frameworks/pci-dss-v4.0.1/01/02/05"
  - "/frameworks/pci-dss-v4.0.1/01/02/06"
  - "/frameworks/pci-dss-v4.0.1/01/03/01"
  - "/frameworks/pci-dss-v4.0.1/01/03/02"
  - "/frameworks/soc-2/cc6/01/03"
  - "/frameworks/soc-2/cc6/01/07"
similarPolicies:
  internal:
    - dec-x-4c15a09f
  cloudConformity:
    - url: https://www.trendmicro.com/cloudoneconformity/knowledge-base/azure/Network/unrestricted-rdp-access.html
      name: Check for Unrestricted RDP Access