RDP Browser Access

Coming Soon

Access Windows servers and desktops directly from the browser. No VPN, no RDP client, no ActiveX plugin.

Status: Code written and compiles. Currently in internal testing — not yet available in production builds.

Architecture

Rust proxy (IronRDP)

RedFox uses a custom Rust proxy built on the IronRDP library. The proxy handles the RDP protocol (TLS, CredSSP/NLA, graphics pipeline) and streams the display as WebSocket frames to the browser.

Browser rendering

The browser client renders RDP frames on an HTML5 canvas. Keyboard and mouse events are captured and forwarded. Works on Chrome, Firefox, Edge and Safari.

Features

Clipboard

Bidirectional text clipboard between browser and remote desktop. Paste passwords, copy log output.

File transfer

Upload and download files via the RDP virtual channel. Drag-and-drop in the browser UI.

Multi-monitor

Support for multiple monitor layouts. Auto-resize to browser window or fixed resolution.

Session recording

Full graphical session recording for audit and forensics. Replay in the RedFox UI with timeline scrubbing.

Configuration

  1. Add a target — Navigate to Targets → Add Target, select "RDP" as the protocol, enter the hostname and port (default 3389).
  2. Assign credentials — Select a vault entry or enter username/password. RedFox injects credentials via CredSSP (NLA).
  3. Set policies — Configure session timeout, clipboard policy (allow/deny/text-only), file transfer policy, and recording.
  4. Connect — Users click "Connect" from the target list. The RDP session opens in a new browser tab.

Security

  • NLA (Network Level Authentication) enforced — credentials verified before session starts
  • TLS encryption between proxy and target (no legacy RDP security layer)
  • mTLS between browser WebSocket and proxy
  • All sessions logged in the WORM audit trail with user identity, target, duration and file transfers
  • Clipboard and file transfer can be disabled per-policy

Need help with RDP configuration? Contact [email protected]. For pricing information, reach out to [email protected].