Question:
For Remote Desktop connections I've found that the RDP initiator machine connects to the RDP client on UDP 3389. The RDP client machine then sends packets back to the RDP initiator on a random UDP port within the Dynamic/Private range (49152 - 65535), not solely 3389. My question is, can this range be changed to use a single port or a different range of ports?
Background:
We require filtering of outbound ports for compliance purposes. Due to the large range it creates issues for our customers, they have to document and explain the large range to auditors. We want to enable the UDP communication as it does show a noticeable performance increase for RDP connections even on the local LAN.
Also, I am curious to know why a range is used for egress UDP traffic and not TCP 3389 egress traffic.
Thanks for any insight,
Dan