{"id":293,"title":"Cisco Duo ile RDP Eri\u015fimi G\u00fcvenli\u011fi Rehberi","content":"

Windows RDP'yi Cisco Duo MFA ile güvence alt\u0131na almak için kapsaml\u0131 ve detayl\u0131 bir doküman<\/p>\r\n

Cisco Duo Nedir?<\/h2>\r\n

Cisco Duo<\/strong>, çok faktörlü kimlik do\u011frulama (MFA) ve güvenlik eri\u015fim çözümleri sunan bulut tabanl\u0131 bir siber güvenlik platformudur. Kullan\u0131c\u0131lar\u0131n kimliklerini do\u011frulamak ve kurumsal kaynaklara eri\u015fimi güvence alt\u0131na almak için tasarlanm\u0131\u015ft\u0131r.<\/p>\r\n

\ud83d\udccb Temel Özellikleri<\/h2>\r\n

1. Çok Faktörlü Kimlik Do\u011frulama (MFA)<\/strong><\/h3>\r\n
\r\n
\r\n
\r\n
\r\n
 <\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
# Kimlik do\u011frulama yöntemleri:<\/span>\r\n\u2713 Duo Push (<\/span>mobil uygulama)<\/span>\r\n\u2713 SMS do\u011frulama kodu\r\n\u2713 Telefon aramas\u0131\r\n\u2713 Donan\u0131m token'lar\u0131\r\n\u2713 Biyometrik do\u011frulama\r\n\u2713 Uygulama \u015fifreleri<\/pre>\r\n<\/div>\r\n
2. Ko\u015fullu Eri\u015fim<\/strong><\/h3>\r\n
\r\n
\r\n
\r\n
\r\n
 <\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
# Eri\u015fim politikalar\u0131:<\/span>\r\n\u2713 Cihaz güvenlik durumu kontrolü\r\n\u2713 Konum bazl\u0131 eri\u015fim kurallar\u0131\r\n\u2713 Zaman tabanl\u0131 k\u0131s\u0131tlamalar\r\n\u2713 A\u011f konumu kontrolü\r\n\u2713 Cihaz uyumluluk denetimi<\/pre>\r\n<\/div>\r\n
 <\/p>\r\n
3. Cihaz Sa\u011fl\u0131\u011f\u0131 Denetimi<\/strong><\/h3>\r\n
\r\n
\r\n
\r\n
 <\/div>\r\n<\/div>\r\n<\/div>\r\n
# Kontrol edilen özellikler:<\/span>\r\n\u2713 \u0130\u015fletim sistemi güncellemeleri\r\n\u2713 Antivirüs durumu\r\n\u2713 Disk \u015fifreleme\r\n\u2713 Güvenlik yaz\u0131l\u0131mlar\u0131\r\n\u2713 Cihaz jailbreak\/root durumu<\/pre>\r\n<\/div>\r\n
 <\/p>\r\n
Cisco Duo Mimarisi<\/h2>\r\n
\r\n
\r\n
\r\n
 <\/div>\r\n<\/div>\r\n<\/div>\r\n
\u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510    \u250c\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510\r\n\u2502   Kullan\u0131c\u0131     \u2502\u2500\u2500\u2500\u25b6\u2502   Duo Cloud      \u2502\u2500\u2500\u2500\u25b6\u2502   Kurumsal      \u2502\r\n\u2502   Cihaz\u0131        \u2502    \u2502   Servisleri     \u2502    \u2502   Uygulamalar\u0131  \u2502\r\n\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518    \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518    \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518<\/pre>\r\n<\/div>\r\n
Çal\u0131\u015fma Prensibi<\/h3>\r\n
    \r\n
  1. \r\n
    Kullan\u0131c\u0131<\/strong> uygulamaya eri\u015fim sa\u011flamak ister<\/p>\r\n<\/li>\r\n
  2. \r\n
    Duo Agent\/Arayüz<\/strong> kimlik do\u011frulama iste\u011fi olu\u015fturur<\/p>\r\n<\/li>\r\n
  3. \r\n
    Duo Cloud<\/strong> do\u011frulama yöntemini uygular<\/p>\r\n<\/li>\r\n
  4. \r\n
    Kullan\u0131c\u0131<\/strong> mobil cihaz\u0131ndan do\u011frulamay\u0131 onaylar<\/p>\r\n<\/li>\r\n
  5. \r\n
    Eri\u015fim<\/strong> ba\u015far\u0131l\u0131 do\u011frulama sonras\u0131 sa\u011flan\u0131r<\/p>\r\n<\/li>\r\n<\/ol>\r\n
    Desteklenen Entegrasyonlar<\/h2>\r\n
    \u0130\u015fletim Sistemleri<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Windows<\/span>\r\n\u2713 Windows Logon (<\/span>yerel ve domain)<\/span>\r\n\u2713 Remote Desktop (<\/span>RDP)<\/span>\r\n\u2713 IIS Web Sunucular\u0131\r\n\u2713 ADFS (<\/span>Active Directory Federation Services)<\/span>\r\n\r\n# Linux\/Unix<\/span>\r\n\u2713 SSH eri\u015fimi\r\n\u2713 PAM (<\/span>Pluggable Authentication Modules)<\/span>\r\n\u2713 Süper kullan\u0131c\u0131 (<\/span>sudo)<\/span> eri\u015fimi\r\n\r\n# macOS<\/span>\r\n\u2713 macOS oturum açma\r\n\u2713 Screen Saver kilidi\r\n\u2713 SSH eri\u015fimi<\/pre>\r\n<\/div>\r\n
    Bulut ve \u015eirket \u0130çi Uygulamalar<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Microsoft Ürünleri<\/span>\r\n\u2713 Office 365<\/span>\r\n\u2713 Active Directory\r\n\u2713 Azure AD\r\n\u2713 SharePoint\r\n\r\n# VPN Çözümleri<\/span>\r\n\u2713 Cisco AnyConnect\r\n\u2713 Palo Alto Networks\r\n\u2713 Fortinet FortiGate\r\n\u2713 Pulse Secure\r\n\r\n# Di\u011fer Popüler Uygulamalar<\/span>\r\n\u2713 Salesforce\r\n\u2713 Workday\r\n\u2713 Slack\r\n\u2713 AWS\r\n\u2713 G Suite<\/pre>\r\n<\/div>\r\n
    Lisanslama Modelleri<\/h2>\r\n
    Duo Free<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Özellikler:<\/span>\r\n\u2713 10<\/span> kullan\u0131c\u0131 s\u0131n\u0131r\u0131\r\n\u2713 Temel MFA özellikleri\r\n\u2713 Duo Push, telefon, SMS\r\n\u2713 Mobil uygulama eri\u015fimi\r\n\u2713 Temel raporlama<\/pre>\r\n<\/div>\r\n
    Duo MFA<\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Özellikler:<\/span>\r\n\u2713 S\u0131n\u0131rs\u0131z kullan\u0131c\u0131\r\n\u2713 Tüm MFA yöntemleri\r\n\u2713 Donan\u0131m token deste\u011fi\r\n\u2713 Telefon geri arama\r\n\u2713 Yedek kodlar<\/pre>\r\n<\/div>\r\n
    Duo Beyond<\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Geli\u015fmi\u015f Özellikler:<\/span>\r\n\u2713 Ko\u015fullu eri\u015fim politikalar\u0131\r\n\u2713 Cihaz sa\u011fl\u0131k denetimi\r\n\u2713 Güvenilirlik skorlama\r\n\u2713 Geli\u015fmi\u015f tehdit analizi\r\n\u2713 Zero-Trust güvenlik modeli<\/pre>\r\n<\/div>\r\n
    Duo Access<\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Enterprise Özellikler:<\/span>\r\n\u2713 Kimlik do\u011frulama güvenilirli\u011fi\r\n\u2713 Davran\u0131\u015fsal analiz\r\n\u2713 Risk tabanl\u0131 politikalar\r\n\u2713 Geli\u015fmi\u015f raporlama ve API'ler<\/pre>\r\n<\/div>\r\n
    \r\n
    \ud83d\udee1\ufe0f Güvenlik Özellikleri<\/h2>\r\n
    Kimlik Do\u011frulama Yöntemleri<\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Birincil Yöntemler:<\/span>\r\n1<\/span>. Duo Push        # \ud83d\udcf1 Mobil uygulama bildirimi<\/span>\r\n2<\/span>. Telefon Arama   # \ud83d\udcde Otomatik sesli kod<\/span>\r\n3<\/span>. SMS             # \u2709\ufe0f Tek kullan\u0131ml\u0131k kod<\/span>\r\n4<\/span>. Hardware Token  # \ud83d\udd11 Fiziksel güvenlik anahtar\u0131<\/span>\r\n5<\/span>. Biyometrik      # \ud83d\udc46 Parmak izi\/yüz tan\u0131ma<\/span><\/pre>\r\n<\/div>\r\n
    Güvenlik Politikalar\u0131<\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Politika Kontrolleri:<\/span>\r\n\u2713 Cihaz uyumluluk denetimi\r\n\u2713 Co\u011frafi k\u0131s\u0131tlama\r\n\u2713 Zaman k\u0131s\u0131tlamalar\u0131\r\n\u2713 A\u011f konumu kontrolü\r\n\u2713 Güvenlik grubu politikalar\u0131<\/pre>\r\n<\/div>\r\n
    \r\n
    \ud83d\udcca Avantajlar\u0131<\/h2>\r\n
    1. Kullan\u0131c\u0131 Dostu Arayüz<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Tek t\u0131kla do\u011frulama (<\/span>Duo Push)<\/span>\r\n\u2713 Sezgisel mobil uygulama\r\n\u2713 Kolay kurulum ve yap\u0131land\u0131rma\r\n\u2713 Çok dilli destek<\/pre>\r\n<\/div>\r\n
    2. Esnek Da\u011f\u0131t\u0131m Seçenekleri<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Bulut tabanl\u0131 (<\/span>SaaS)<\/span>\r\n\u2713 Hibrit da\u011f\u0131t\u0131m modelleri\r\n\u2713 \u015eirket içi (<\/span>on-premises)<\/span> seçenekleri\r\n\u2713 API entegrasyon deste\u011fi<\/pre>\r\n<\/div>\r\n
    3. Kapsaml\u0131 Raporlama<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Gerçek zamanl\u0131 kimlik do\u011frulama loglar\u0131\r\n\u2713 Eri\u015fim denetimi raporlar\u0131\r\n\u2713 Cihaz uyumluluk raporlar\u0131\r\n\u2713 Güvenlik olay\u0131 takibi<\/pre>\r\n<\/div>\r\n
    4. Yüksek Eri\u015filebilirlik<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
    \r\n
    bash<\/span><\/div>\r\n<\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 %99.9 uptime<\/span> SLA\r\n\u2713 Global veri merkezleri\r\n\u2713 Otomatik yük dengeleme\r\n\u2713 Felaket kurtarma senaryolar\u0131<\/pre>\r\n<\/div>\r\n
    \r\n
    \ud83d\udd04 Kurulum ve Yönetim<\/h2>\r\n
    Yönetim Konsolu Özellikleri<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Admin Panel Yetenekleri:<\/span>\r\n\u2713 Kullan\u0131c\u0131 ve grup yönetimi\r\n\u2713 Politika konfigürasyonu\r\n\u2713 Uygulama entegrasyonu\r\n\u2713 Raporlama ve analiz\r\n\u2713 API anahtar yönetimi<\/pre>\r\n<\/div>\r\n
    Mobil Uygulama Özellikleri<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Duo Mobile App:<\/span>\r\n\u2713 Push bildirimleri\r\n\u2713 Tek kullan\u0131ml\u0131k \u015fifreler (<\/span>TOTP)<\/span>\r\n\u2713 Hesap yönetimi\r\n\u2713 Yedekleme ve geri yükleme\r\n\u2713 Çoklu hesap deste\u011fi<\/pre>\r\n<\/div>\r\n
    \r\n
    \ud83c\udfaf Kullan\u0131m Senaryolar\u0131<\/h2>\r\n
    1. Uzaktan Çal\u0131\u015fma Güvenli\u011fi<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 VPN eri\u015fimi korumas\u0131\r\n\u2713 Uzak masaüstü (<\/span>RDP)<\/span> güvenli\u011fi\r\n\u2713 Bulut uygulama eri\u015fimi\r\n\u2713 Mobil cihaz güvenli\u011fi<\/pre>\r\n<\/div>\r\n
    2. Privileged Access Management<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Yönetici hesab\u0131 korumas\u0131\r\n\u2713 Sunucu eri\u015fim güvenli\u011fi\r\n\u2713 A\u011f cihaz\u0131 yönetimi\r\n\u2713 Veritaban\u0131 eri\u015fimi<\/pre>\r\n<\/div>\r\n
    3. Regulatory Compliance<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 SOX uyumlulu\u011fu\r\n\u2713 HIPAA gereksinimleri\r\n\u2713 GDPR uyumu\r\n\u2713 PCI DSS standard\u0131<\/pre>\r\n<\/div>\r\n
    \r\n
    \ud83d\udcc8 Performans ve Ölçeklenebilirlik<\/h2>\r\n
    Teknik Özellikler<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Performans Metrikleri:<\/span>\r\n\u2713 Saniyede 1000<\/span>+ kimlik do\u011frulama\r\n\u2713 <<\/span> 2<\/span> saniye yan\u0131t süresi\r\n\u2713 Global CDN deste\u011fi\r\n\u2713 Otomatik ölçeklendirme<\/pre>\r\n<\/div>\r\n
    Entegrasyon Standartlar\u0131<\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    # Desteklenen Protokoller:<\/span>\r\n\u2713 RADIUS\r\n\u2713 SAML 2.0<\/span>\r\n\u2713 OAuth 2.0<\/span>\r\n\u2713 OpenID Connect\r\n\u2713 REST API\r\n\u2713 LDAP<\/pre>\r\n<\/div>\r\n
    \r\n
    \ud83d\udca1 Neden Cisco Duo Kullan\u0131l\u0131r?<\/h2>\r\n
    1. Güvenlik<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Çok faktörlü kimlik do\u011frulama\r\n\u2713 Cihaz güvenlik durumu kontrolü\r\n\u2713 Gerçek zamanl\u0131 tehdit korumas\u0131\r\n\u2713 Zero-Trust mimarisi<\/pre>\r\n<\/div>\r\n
    2. Kullan\u0131m Kolayl\u0131\u011f\u0131<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Basit kurulum\r\n\u2713 Sezgisel arayüz\r\n\u2713 Minimum kullan\u0131c\u0131 e\u011fitimi\r\n\u2713 H\u0131zl\u0131 da\u011f\u0131t\u0131m<\/pre>\r\n<\/div>\r\n
    3. Maliyet Etkinli\u011fi<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Dü\u015fük toplam sahip olma maliyeti\r\n\u2713 Ölçeklenebilir fiyatland\u0131rma\r\n\u2713 Donan\u0131m gereksinimi yok\r\n\u2713 Otomatik güncellemeler<\/pre>\r\n<\/div>\r\n
    4. Uyumluluk<\/strong><\/h3>\r\n
    \r\n
    \r\n
    \r\n
     <\/div>\r\n<\/div>\r\n<\/div>\r\n
    \u2713 Endüstri standartlar\u0131 deste\u011fi\r\n\u2713 Kapsaml\u0131 sertifikasyonlar\r\n\u2713 Detayl\u0131 denetim loglar\u0131\r\n\u2713 Regulatory compliance<\/pre>\r\n<\/div>\r\n
    Cisco Duo, modern siber güvenlik tehditlerine kar\u015f\u0131 kapsaml\u0131 bir koruma sa\u011flayarak, kurumlar\u0131n dijital dönü\u015füm sürecinde güvenli eri\u015fim yönetimini merkezile\u015ftirmelerine olanak tan\u0131r.<\/p>\r\n
    Windows RDP'yi Cisco Duo MFA ile Güvenli Hale Getirme<\/h3>\r\n
     Ön Ko\u015fullar ve Gereksinimler;<\/p>\r\n
      \r\n
    •  Windows Server (2012 R2 veya üzeri)<\/li>\r\n
    •  Cisco Duo Hesab\u0131 (Duo Authentication for Windows Logon lisans\u0131)<\/li>\r\n
    •  Yönetici Haklar\u0131<\/li>\r\n
    •  RDP'nin Etkin Oldu\u011fu Sunucu<\/li>\r\n
    •  \u0130nternet Ba\u011flant\u0131s\u0131 (Duo API'sine eri\u015fim için)<\/li>\r\n<\/ul>\r\n
       <\/p>\r\n
      1. Duo Security Admin Paneli Haz\u0131rl\u0131\u011f\u0131<\/h2>\r\n
       Ad\u0131m Ad\u0131m Uygulama Eklenmesi

       Admin paneline eri\u015fim<\/code>
      StartProcess \"https:\/\/admin.duosecurity.com\"<\/code><\/p>\r\n
      1. Applications sekmesine gidin
      2. Protect an Application butonuna t\u0131klay\u0131n
      3. Arama kutusuna \"Microsoft RDP\" yaz\u0131n ve seçin
      4. Integration key, Secret key ve API hostname de\u011ferlerini güvenli bir yere kaydedin<\/p>\r\n
      2. Duo Authentication for Windows Logon Kurulumu<\/h2>\r\n
       PowerShell ile Kurulum<\/p>\r\n

      powershell
       Duo installer'\u0131 indirme
      $DuoInstaller = \"duowinloginlatest.msi\"<\/code>
      InvokeWebRequest Uri \"https:\/\/dl.duosecurity.com\/duowinloginlatest.msi\" OutFile $DuoInstaller<\/code><\/p>\r\n
       Kurulumu gerçekle\u015ftirme
      StartProcess msiexec ArgumentList \"\/i $DuoInstaller \/quiet \/norestart\" Wait<\/code><\/p>\r\n
      Kurulum dosyas\u0131n\u0131 temizleme
      RemoveItem $DuoInstaller<\/code><\/p>\r\n

      Kurulum Do\u011frulama
      powershell
       Duo servisinin durumunu kontrol etme
      GetService Name \"DuoService\" | SelectObject Name, Status, StartType<\/code><\/p>\r\n
      3. Yap\u0131land\u0131rma Dosyas\u0131 Olu\u015fturma<\/p>\r\n
       login_duo.conf Dosyas\u0131
      powershell
       Yap\u0131land\u0131rma dosyas\u0131 yolu
      $ConfPath = \"C:\\Program Files\\Duo Security\\login_duo.conf\"<\/code><\/p>\r\n
      Yap\u0131land\u0131rma içeri\u011fi
      $ConfContent = @\"<\/code>
      ; Duo Security API entegrasyon anahtarlar\u0131<\/code>
      ikey=INTEGRATION_KEY_HERE<\/code>
      skey=SECRET_KEY_HERE<\/code>
      host=API_HOSTNAME_HERE<\/code><\/p>\r\n
      ; RDP yap\u0131land\u0131rma ayarlar\u0131<\/code>
      failmode=secure<\/code>
      pushinfo=hostname,ip<\/code>
      autopush=yes<\/code>
      prompts=1<\/code>
      groups=Administrators<\/code>
      timeout=60<\/code>
      http_proxy=<\/code>
      \"@<\/code><\/p>\r\n
       Dosyay\u0131 olu\u015fturma ve izinleri ayarlama
      $ConfContent | OutFile FilePath $ConfPath Encoding ASCII<\/code><\/p>\r\n
       Güvenlik izinlerini ayarlama<\/code>
      $Acl = GetAcl $ConfPath<\/code>
      $Acl.SetAccessRuleProtection($true, $false)<\/code>
      $Acl | SetAcl $ConfPath<\/code><\/p>\r\n
       4. Group Policy Yap\u0131land\u0131rmas\u0131<\/p>\r\n
       GPO ile Credential Provider Ayarlama
       Group Policy ayar\u0131
      $GpoPath = \"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\"<\/code>
      NewItemProperty Path $GpoPath Name \"RequiredCredentialProviders\" Value \"{EC71A2666B5B4a2b8B7B13E4991B5D32}\" PropertyType String Force<\/code><\/p>\r\n

       Alternatif  Registry Düzenlemesi

       Credential Provider registry ayar\u0131
      $RegPath = \"HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Authentication\\Credential Providers\\{EC71A2666B5B4a2b8B7B13E4991B5D32}\"<\/code>
      NewItem Path $RegPath Force | OutNull<\/code><\/p>\r\n
      5. Geli\u015fmi\u015f Güvenlik Ayarlar\u0131<\/p>\r\n
       RDP Güvenlik Politikalar\u0131<\/p>\r\n

       Network Level Authentication'\u0131 etkinle\u015ftirme
      SetItemProperty Path 'HKLM:\\System\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDPTcp' Name \"UserAuthentication\" Value 1<\/code><\/p>\r\n
       \u015eifreleme seviyesini yükseltme
      SetItemProperty Path 'HKLM:\\System\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDPTcp' Name \"MinEncryptionLevel\" Value 3<\/code><\/p>\r\n
       RDP portunu de\u011fi\u015ftirme (opsiyonel güvenlik önlemi)
      SetItemProperty Path 'HKLM:\\System\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDPTcp' Name \"PortNumber\" Value 3389<\/code><\/p>\r\n

      Windows Firewall Kurallar\u0131

      Varsay\u0131lan RDP kural\u0131n\u0131 devre d\u0131\u015f\u0131 b\u0131rakma
      SetNetFirewallRule DisplayName \"Remote Desktop  User Mode (TCPIn)\" Enabled False<\/code><\/p>\r\n
      Özel RDP kural\u0131 olu\u015fturma
      NewNetFirewallRule DisplayName \"RDPDuoSecure\" <\/code>
          Direction Inbound <\/code>
          Protocol TCP <\/code>
          LocalPort 3389 <\/code>
          Action Allow <\/code>
          Profile Any <\/code>
          Description \"Custom RDP rule with Duo MFA\"<\/code><\/p>\r\n
       <\/p>\r\n

       6. Geli\u015fmi\u015f Duo Yap\u0131land\u0131rma Seçenekleri<\/p>\r\n
       Grup Bazl\u0131 Eri\u015fim Kontrolü
      conf<\/code>
      ; Grup bazl\u0131 yap\u0131land\u0131rma<\/code>
      groups=rdpusers,admins<\/code>
      failmode=secure<\/code>
      pushinfo=hostname,ip,command<\/code>
      autopush=yes<\/code>
      prompts=1<\/code>
      accept_env=no<\/code>
      http_proxy=<\/code>
      fallback_local_ip=yes<\/code><\/p>\r\n

       Yüksek Güvenlik Ortam\u0131 \u0130çin
      conf<\/code>
      ; Yüksek güvenlik yap\u0131land\u0131rmas\u0131<\/code>
      failmode=safe<\/code>
      pushinfo=yes<\/code>
      autopush=yes<\/code>
      prompts=2<\/code>
      groups=@admin,@rdpusers<\/code>
      timeout=30<\/code>
      accept_env=no<\/code><\/p>\r\n
       <\/p>\r\n

       7. Kapsaml\u0131 Güvenlik En \u0130yi Uygulamalar\u0131<\/p>\r\n
       Parola Politikalar\u0131

       Parola politikalar\u0131n\u0131 güçlendirme
      secedit \/export \/cfg secpol.cfg<\/code>
      (GetContent secpol.cfg) replace 'MinimumPasswordLength = 7', 'MinimumPasswordLength = 12' | SetContent secpol.cfg<\/code>
      secedit \/configure \/db secedit.sdb \/cfg secpol.cfg<\/code>
      RemoveItem secpol.cfg<\/code><\/p>\r\n

       Oturum Yönetimi

       Oturum zaman a\u015f\u0131m\u0131 ayarlar\u0131
      SetItemProperty Path 'HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Terminal Services' Name \"MaxDisconnectionTime\" Value 300000<\/code>
      SetItemProperty Path 'HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Terminal Services' Name \"MaxIdleTime\" Value 900000<\/code><\/p>\r\n
       Maksimum ba\u011flant\u0131 say\u0131s\u0131<\/code>
      SetItemProperty Path 'HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Terminal Services' Name \"MaxInstanceCount\" Value 2<\/code><\/p>\r\n
      8. Kapsaml\u0131 \u0130zleme ve Loglama<\/p>\r\n
       Event Log Yap\u0131land\u0131rmas\u0131

       Özel Duo event log'u olu\u015fturma
      if (![System.Diagnostics.EventLog::SourceExists(\"Duo Security\")) {<\/code>
          NewEventLog LogName \"Duo\" Source \"Duo Security\"<\/code>
      }<\/code><\/p>\r\n
       Log retension politikas\u0131<\/code>
      LimitEventLog LogName \"Duo\" RetentionDays 90 MaximumSize 102400KB<\/code><\/p>\r\n

      Performans \u0130zleme

       Duo performans sayaçlar\u0131 (e\u011fer mevcutsa)
      $Counters = @(<\/code>
          \"\\Duo Security()\\\",<\/code>
          \"\\Process(DuoService)\\\",<\/code>
          \"\\Memory\\Available MBytes\"<\/code>
      )<\/code><\/p>\r\n
       Realtime izleme ba\u015flatma<\/code>
      GetCounter Counter $Counters SampleInterval 5 MaxSamples 12<\/code><\/p>\r\n
       9. Detayl\u0131 Sorun Giderme Rehberi<\/p>\r\n
       Ba\u011flant\u0131 Sorunlar\u0131

       Kapsaml\u0131 ba\u011flant\u0131 testi
      TestNetConnection ComputerName $DuoAPIHost Port 443<\/code>
      TestNetConnection ComputerName $DuoAPIHost Port 80<\/code><\/p>\r\n
       DNS çözümleme testi
      ResolveDnsName Name $DuoAPIHost<\/code><\/p>\r\n
       Servis durumu kontrolü
      GetService \"DuoService\" | FormatList <\/code><\/p>\r\n

      Yap\u0131land\u0131rma Do\u011frulama

       Yap\u0131land\u0131rma dosyas\u0131 do\u011frulama
      TestPath \"C:\\Program Files\\Duo Security\\login_duo.conf\"<\/code>
      GetContent \"C:\\Program Files\\Duo Security\\login_duo.conf\"<\/code><\/p>\r\n
       Registry ayarlar\u0131n\u0131 kontrol etme
      GetItemProperty \"HKLM:\\SOFTWARE\\Duo Security\\DuoCredProv\" ErrorAction SilentlyContinue<\/code><\/p>\r\n

       Log Analizi

       Son Duo olaylar\u0131n\u0131 görüntüleme
      GetEventLog LogName \"Duo\" Newest 20 | FormatTable TimeGenerated, EntryType, Message AutoSize<\/code><\/p>\r\n
       Hata filtreleme
      GetEventLog LogName \"Duo\" EntryType Error, Warning After (GetDate).AddDays(1)<\/code><\/p>\r\n
       <\/p>\r\n
      10. Bak\u0131m ve Güncelleme Prosedürleri<\/p>\r\n
       Otomatik Güncelleme Kontrolü

       Mevcut Duo versiyonunu kontrol etme
      $DuoVersion = GetWmiObject Class Win32_Product | WhereObject {$_.Name like \"Duo\"}<\/code>
      $DuoVersion | SelectObject Name, Version, Vendor<\/code><\/p>\r\n
       Yeni versiyon kontrolü
      $LatestVersion = InvokeRestMethod Uri \"https:\/\/dl.duosecurity.com\/duowinloginlatest.version\"<\/code>
      WriteHost \"Latest available version: $LatestVersion\"<\/code><\/p>\r\n

       Yedekleme Prosedürleri

       Yap\u0131land\u0131rma yedekleme
      $BackupPath = \"C:\\Backup\\Duo\\$(GetDate Format 'yyyyMMdd_HHmmss')\"<\/code>
      NewItem ItemType Directory Path $BackupPath Force<\/code><\/p>\r\n
       Kritik dosyalar\u0131 yedekleme
      CopyItem \"C:\\Program Files\\Duo Security\\login_duo.conf\" Destination $BackupPath<\/code>
      CopyItem \"C:\\ProgramData\\Duo Security\" Destination $BackupPath Recurse ErrorAction SilentlyContinue<\/code><\/p>\r\n
       Registry yedekleme
      Reg export \"HKLM\\SOFTWARE\\Duo Security\" \"$BackupPath\\duo_registry.reg\"<\/code><\/p>\r\n
       11. Acil Durum Prosedürleri<\/p>\r\n
      Duo Servis Çökerse

       Acil durum modu (failopen\/failclose)
       login_duo.conf dosyas\u0131nda failmode ayar\u0131:
        secure: MFA gerektirir (önerilen)
        safe: MFA olmadan eri\u015fime izin verir<\/p>\r\n
       Servisi yeniden ba\u015flatma
      RestartService Name \"DuoService\" Force<\/p>\r\n
       Fallback kimlik do\u011frulama
       Yedek credential provider'\u0131 etkinle\u015ftirme<\/p>\r\n

      Felaket Kurtarma Senaryosu

       Duo yap\u0131land\u0131rmas\u0131n\u0131 tamamen kald\u0131rma
      StopService Name \"DuoService\" Force<\/code>
      GetWmiObject Class Win32_Product | WhereObject {$_.Name like \"Duo\"} | ForEachObject {$_.Uninstall()}<\/code>
      RemoveItem \"C:\\Program Files\\Duo Security\" Recurse Force<\/code>
      RemoveItem \"C:\\ProgramData\\Duo Security\" Recurse Force ErrorAction SilentlyContinue<\/code><\/p>\r\n
       Orijinal RDP ayarlar\u0131na dönme
      RemoveItemProperty \"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\" Name \"RequiredCredentialProviders\" ErrorAction SilentlyContinue<\/code><\/p>\r\n
       <\/p>\r\n
      Bu geni\u015fletilmi\u015f rehber, mevcut içeri\u011finizi daha kapsaml\u0131 hale getirerek Windows RDP'yi Cisco Duo MFA ile güvence alt\u0131na almak için gereken tüm ad\u0131mlar\u0131 detayl\u0131 bir \u015fekilde sunmaktad\u0131r. Her bölüm, farkl\u0131 senaryolara uygun çözümler içermektedir.<\/p>","excerpt":"Windows RDP'yi Cisco Duo MFA ile g\u00fcvence alt\u0131na almak i\u00e7in kapsaml\u0131 ve detayl\u0131 bir dok\u00fcman","created_at":"2024-12-15 14:28:06","updated_at":"2026-09-23 18:33:08","category_id":6,"view_count":755,"reading_time":10,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2024-12-15 14:28:06","featured_image":"resimyok.jpg","slug":"cisco-duo-ile-rdp-erisimi-guvenligi-rehberi","category_name":"Sistem","category_slug":"sistem"}