We are hosting a Windows 7 desktop Pro on a KVM machine, where a legacy software which does not run on a Windows Server 2008-16 is hosted. We are exposing it to Internet as users need to login once in a while via RDP and connect to the machine.
It has a very low intermittent use, but we need to keep the machine live 24x7. Problem is there are several security issues associated and we are not aware of many.
Can someone advise what we will need to be doing?
We are running RDP on a different port. We have FailBan and Firewalling on the Main Server, DDOS is enabled by the Data Center. Windows Firewall is enabled.
But what else do we need to be doing?