RDP Access Logs

Question

Hello Sophos Community, 
 This is my first post, happy to be here. 
 How do I access RDP Access Logs on XG330? We have rules that map WAN access and route them to RDP IP's. 
 
 Thanks 
 Mandeep

FormerMember · Accepted Answer

Hi Mandeep, Welcome to the Sophos Community.

There won't be exact logs about who accessed RDP but you can go to Reports > Dashboard > Allowed Policies. Here You'll find Firewall rule IDs. Click on the Firewall rule that matches your RDP access rule and it'll give you further details about source hosts etc..

RDP Access Logs

Top Replies