LAN access from Remote R7500v2 and alternatives to PF

I get a ton of RDP attempts on my custom RDP port that I turn on port forwarding for.  I get the "[LAN access from remote]" lines and, to start, just want to confirm that all that means is the router forwarded on the connection like it's supposed to.

I'm not too worried about it as  in my Security log I see they are attempting to login with local admin accounts which aren't enabled (or don't exist).  So they aren't successfully getting in as far as I can tell (thoughts on anything else to check?).  But does anyone have any alternatives to accessing RDP remotely?  Was thinking of turning on the router's VPN and connecting to that to then RDP in.  Is the VPN on this router good and secure?  Other suggestions?