How to Restrict Copy & Paste (Clipboard Redirection) in RDP Sessions via ZTNA

Products

• Symantec ZTNA

Issue/Introduction

To configure Symantec ZTNA (Zero Trust Network Access) to block copy and paste (clipboard redirection) in RDP sessions which helps reduce data exfiltration risk via clipboard during remote access.

Resolution

There are 2 steps to achieve this requirement

1. Creating RDP application 
   • Follow steps from Create a ZTNA RDP Application
   • Select ACCESS TYPE as Browser as seen below:
     
     
     
2. Creating RDP access policy
   • Follow steps from Create a ZTNA RDP Access Policy
   • Select ACCESS TYPE as Browser
   • In the CONNECTION SETTINGS - PERMISSIONS - ensure Prevent Copy and Prevent Paste are checked as seen below:
     

Once active, the ZTNA service will enforce the clipboard restrictions for sessions that match the policy.