Knowledge Base
Searching in : Document
ID: DT09U00306
Version: NoMachine 9
Added on: 2025-05-20
Last Update: 2025-05-23
Print this article

Secure remote access without knowing the IP and without Port Forwarding

Do you need to connect to a computer but you don't know its IP or does your IT provider gives only dynamic IPs? Are you often called to on-the-fly remote assistance by your friends or colleagues?

NoMachine Network is the service for you: secure and fast connections to machines published on the Network, without the need to know their IP and to open a port in the firewall or router. Once connected, you will exploit all the server capabilities as defined by its license.

Who is it for?
Everyone who needs to connect to a remote desktop, included NoMachine Linux virtual desktops. Perfect for personal use (e.g. to assist your relatives and friends) as well as for business use, included large environments like multi-node setups with Cloud Servers and Enterprise Terminal Servers. Combine the power of a NoMachine server with the easiness of the Network service.

What is it for?
Provide seamless connection to the remote computer, if available online on the NoMachine Network. A NoMachine server must be installed there, all range of servers, included the NoMachine free version, are supported. Publishing a machine on Network is completely free.

The user who needs to connect must have a NoMachine Network account and a Network subscription and must own the credentials of a valid user to login to the remote computer.

If you don't want to share credentials of an existing user on the remote computer, the NoMachine Network Service can be used in conjunction with Guest Desktop Sharing for attended access to its physical desktop without having to create an account for the connecting user (guest) or distributing login credentials. See link to use case Fast and secure access to the remote computer with Guest Desktop Sharing

Key features
- Make available an unlimited number of machines on NoMachine Network for free.
- All servers supported, included the NoMachine free version, also for business use.
- Get monthly or yearly subscription tailored to the number of connections you need.
- Protected access to the remote machines by their machine's ID and Access id (optional) plus a further security layer by system login and (optional) 2FA authentication.
- End-to-end encryption of all data traffic by NX protocol.
- Browser-based connections to the remote server via NoMachine website (except for NoMachine free).

What do you need?
- The remote machine must have any of the NoMachine servers installed. The free version of NoMachine is supported, but computers running a server with NoMachine license for evaluation cannot be added to Network.
- On your device from which you connect, install NoMachine Enterprise Client. You can also use NoMachine free or any other server, they all include the client. Create a NoMachine Network account and purchase the Network subscription suitable for your needs.

Do you want to connect the remote machine by your browser?
Open the NoMachine website on the NoMachine Network page. From there, you can choose between the blue buttons 'Go to Network' and 'Create an account' (scroll down the page if you don't see the buttons immediately).

Create an account and purchase any of the available NoMachine Network subscriptions, if you didn't do it already.

If you have already both of them, click on 'Go to Network' and enter section 'Connect with any browser' at the end of the page. Insert the Machine id of the remote computer (it must have a NoMachine server installed and being available on Network) and the button 'Go'. You will be then requested to login with your NoMachine account. This works with whichever server type, excluded NoMachine free version that doesn't support web sessions.

If you provide the IP instead than the NoMachine id, you will not use the NoMachine Network service.

How does it work?
The NoMachine Network service uses its own secure protocol (the NX protocol) and servers (let's call them 'Network Servers') to establish a connection between a NoMachine Network client and a NoMachine Network-enabled machine with a server installed. Data transmission is always encrypted, protected by Public Key Cryptography provided by OpenSSL TLS/SSL.

NoMachine Network initially uses the Hole Punching technique to cross NATs and establish a direct connection (P2P) between the clients.

When this is not possible, NoMachine Network switches to use its relay server and the communication between the clients is not direct.