When Windows Remote Desktop Protocol (RDP) is enabled on a Windows Platform as a Service (WPaaS) system, the Windows Firewall limits incoming connections to on-campus networks. Connections via RDP to WPaaS systems require use of the Campus VPN or the Cisco AnyConnect Management Tunnel
More Details
...
In order to connect to a WPaaS computer from off-campus, customers must use the campus Virtual Private Network (VPN) or the Cisco AnyConnect Management Tunnel on the device they are connecting from. Customers may install a Cisco VPN Client to use the campus VPN. Cisco VPN Clients are available for Windows, macOS, iOS, Linux, and Android operating systems. The Cisco VPN client can be installed on personally-owned devices. Customers connecting from a WPaaS device will utilize the Cisco AnyConnect Management Tunnel to connect.
...