MFA for RDP and
legacy systems.
No client changes, no friction.

GuardianKey Bastion Pass brings multi-factor authentication to remote access through RD Gateway and to any system that has no place to ask for a second factor. Users confirm their identity in seconds in the browser and keep using the tools they already know.

Protect Your Remote Access

A second factor where it never fit

A leaked password should not open the door to your network. With Bastion Pass, every RD Gateway connection is accepted only after the user has confirmed their identity with a second factor from that address.

MFA for RDP, nothing changes on the workstation

Users keep connecting with the Remote Desktop Connection (mstsc) they already know. The second factor happens in a simple web portal, with the authenticator app on their phone.

Nothing installed on the gateway servers

The integration runs on the NPS server that RD Gateway already uses to authorize connections. A single installation protects the whole gateway farm, and your current policies keep working.

Risk checked on every connection

Every access goes through user and IP policies and through GuardianKey Auth Security risk analysis. Connections without an unlock, or flagged as risky, are closed within seconds.

Ready for other legacy systems

The same model protects legacy Java applications and proprietary desktop clients. Only the integration module changes; the portal, policies and audit trail stay the same.

How it works

Three steps for the user. Zero changes to the systems you already run.

1

Unlock access

The user signs in to the portal with their company password and the authenticator app code. By checking "Trust this IP", they don't repeat it for 30 days.

2

Connect as usual

They open the remote connection as always. From the same IP, while the unlock is valid, there is no extra step.

3

Every connection is checked

Bastion Pass checks the unlock, the policies and the risk on every new connection. Anyone who skipped the second factor has the connection closed automatically.

Why Choose GuardianKey Bastion Pass?

Protection where a password is not enough: Leaked or guessed credentials are no longer enough to open a remote session on your network.

Zero changes on workstations: No agent, no new client, no new tool for your users to learn.

Centralized management: Users, policies and audit trail in the same Auth Bastion panel that manages your web systems.

Your brand on the portal: Logo, colors and product name your way, with no code changes.

Easier compliance: Meet MFA requirements for remote access, such as those in PCI DSS, with every decision recorded for audits.

Talk to a Specialist

Contact

+55 (61) 99271-7091[email protected]

Brazil:
CRS 516, Bloco B, Sobreloja 69
ZIP 70381-525, Brasília – Brazil

US Entity :
GuardianKey Inc.
Corporation Trust Center
1209 North Orange Street, Wilmington, DE 19801, USA

Privacy Policy

© 2025 GuardianKey

linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram