We tend to use Tunnel for most of our external traffic. But we have to leave a RDP server dst-nat for some users.

We can see a lot of retries of people that fails the RDP autherntication. Is there a simple way to block those new connections after 5 retries for a day using a filter rule?

Martin