TruGrid SecureRDP licensing

In short: TruGrid SecureRDP is a zero trust remote desktop service. Users sign in through TruGrid's cloud with MFA, then reach office PCs, RDS servers or virtual desktops without a VPN and with no inbound firewall ports open. TruGrid publishes Basic, Business and Enterprise plans, licensed per user, and a trial is available.

What TruGrid SecureRDP is

TruGrid SecureRDP secures Remote Desktop Protocol connections to Windows desktops and applications. Rather than publishing RDP to the internet, or giving remote devices a VPN tunnel onto the network, it puts TruGrid's cloud between the user and the machine:

• Cloud authentication first: users sign in to TruGrid, which checks them against your directory and MFA before any connection reaches your network. TruGrid only contacts Active Directory after MFA has succeeded, so stolen passwords and brute-force attempts do not reach your domain.
• No inbound ports: the TruGrid components inside your network connect outbound, so the firewall can stay closed and the network is not visible from the internet.
• Zero trust session: a user reaches only the desktop or app they are entitled to rather than joining the network, and TruGrid says this blocks the data transfer between remote devices and the office network that lets ransomware spread over a VPN.
• Low latency routing: TruGrid routes RDP traffic over its own global fibre relay network, which it says avoids internet congestion for users connecting over long distances.

SecureRDP covers remote work on office PCs, Remote Desktop Services and RemoteApp, VDI, hosted desktop-as-a-service and Azure Virtual Desktop.

TruGrid plans compared

TruGrid publishes SecureRDP in several plans. The core secure access features are the same throughout; the larger plans add management and monitoring for bigger estates.

TruGrid can change what each plan includes, so we confirm the feature set that applies to your subscription when we quote.

How SecureRDP is licensed

SecureRDP is licensed per user. Users who need access are added to the TruGrid users group in Active Directory or Microsoft Entra ID, and each one takes a licence the first time they open a session through TruGrid. After that they can make unlimited RDP connections. Licences are not concurrent: a licence stays with its user whether or not they are signed in, until they are removed from the group, at which point it is freed for someone else.

TruGrid's published Business plan sets a minimum number of users, and Enterprise is sold as a site licence. Whether and when you can reduce the licence count depends on the term, so we confirm the minimum, term and change rules for your organisation when we quote. Prices depend on user numbers and term, so ask us for a quote.

Requirements and deployment

SecureRDP connects to any Windows computer with RDP enabled. A typical deployment looks like this:

1. Directory: connect TruGrid to Microsoft Active Directory, Microsoft Entra ID (formerly Azure AD) or a hybrid of both synchronised with Entra Connect.
2. TruGrid Sentry: install the Sentry agent on a Windows server on the same network as the PCs or RDS hosts users will reach. Where Sentry and the hosts cannot share a network, TruGrid SecureConnect is installed on the hosts themselves.
3. Allow outbound traffic: permit outbound access to TruGrid through your firewall, web filtering and intrusion prevention, and add the TruGrid program folders and processes to your antivirus or EDR exclusions as TruGrid recommends.
4. MFA: TruGrid MFA is on by default, and TruGrid also supports MFA integrated with Microsoft Entra ID for sign-in.
5. User apps: roll out the TruGrid apps for Windows and Mac, which TruGrid recommends over the web connector, plus mobile apps where needed.
6. Close the door: once users are on TruGrid, close inbound RDP ports and retire the VPN.

TruGrid says the most basic implementations are typically set up within a day; larger RDS farms take longer to plan.

Who SecureRDP suits

SecureRDP suits UK organisations whose staff still work on Windows desktops or RDS servers: professional services firms with line-of-business software on an office server, manufacturers and retailers with fixed PCs, care and healthcare providers, and IT teams hosting desktops for several sites. It is especially useful where a cyber insurer asks whether remote access is protected by MFA, or where you need to close exposed ports to meet the firewall control in Cyber Essentials.

If you need wider zero trust access to web apps and private networks rather than just desktops, compare the platforms in SASE and ZTNA.

How we help

We start by mapping what your users connect to and how they sign in, then run a trial with a pilot group. We install Sentry or SecureConnect, connect your directory, set MFA policy and roll out the user apps, then help you close RDP ports and decommission the old VPN. After go-live we handle licence changes, renewals and first-line support on the same invoice as your other subscriptions. Contact us to arrange a trial.

How Forever Systems supplies your software licences

Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.

• The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
• Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
• Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
• Deployment and support from engineers who run these products every day, not just a reseller account
• Consolidated billing and renewal reminders so nothing lapses unexpectedly

We work with businesses, schools, charities and public sector organisations of all sizes.

Frequently asked questions

More software and licensing guides

Related from Forever Group

• ZTNA (zero trust network access)
• Cisco Duo MFA
• Cyber Essentials requirements
• Cyber security services
• Microsoft 365