Welcome to ISAserver.org

Publish an RDP Server on the ISA box?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Publish an RDP Server on the ISA box?

Page: [1]

Message

<< Older Topic Newer Topic >>

Publish an RDP Server on the ISA box? - 18.Mar.2004 9:21:00 PM

tad_braun

Posts: 94
Joined: 31.Dec.2003
Status: offline

Hello,

Here's a problem: I can publish the RDP/Terminal Server on a server in my Internal network, and it works fine. I can connect from the External world.

If I then wanted to TermServ/RDP into the ISA box itself (local network) from the above mentioned RDP session, would I need to do another publish server rule from the internal to the local host network?

The ISA server is a member server of an Active Directory domain that encompasses the Internal network. All servers in question are W2K3 Standard.

Post #: 1

Featured Links*

RE: Publish an RDP Server on the ISA box? - 20.Mar.2004 8:09:00 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tad,

You would have to configure the second rule to use another listener, because if it comes on the same listener as the first RDP publishing rule, how would ISA be able to determine how to forward the request?

Thanks!
Tom

(in reply to tad_braun)

Post #: 2

RE: Publish an RDP Server on the ISA box? - 22.Mar.2004 7:27:00 AM

tad_braun

Posts: 94
Joined: 31.Dec.2003
Status: offline

Thanks Big T for the feedback!

Wouldn't the listener be on the ISA external interface for the first RDP session (from the Internet into the Internal Network), and on the ISA internal interface for the 2nd session (from Internal network to ISA box/local host)? I'm not sure I understand how they could be using the same listener...could you expound on that idea?

(in reply to tad_braun)

Post #: 3

RE: Publish an RDP Server on the ISA box? - 22.Mar.2004 10:58:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tad,

For publishing rules, the listener is typically on the external interface so that external hosts can access the published resources.

So, if you want to publish an RDP server on the Internal network, you need to create a rule that forwards the connection requests from the External client to the Internal server, and the ISA firewall listens for those connections on an IP address on the external interface of the firewall.

If you want to publish an RDP server on the ISA firewall itself, you will need to create a second listener, on a different IP address on the external interface, so that it can forward those connection requests to the RDP server on the firewall itself.

Make sense?

Thanks!
Tom

(in reply to tad_braun)

Post #: 4

RE: Publish an RDP Server on the ISA box? - 23.Mar.2004 7:00:00 AM

tad_braun

Posts: 94
Joined: 31.Dec.2003
Status: offline

Thanks again, Tom...

I have already successfully published an RDP Server for Internet/External network clients to use to get onto the Internal network. That's not a problem...

My question now is, if I was to be using the above mentioned RDP connection from an External client to an Internal box, how would I THEN connect to my ISA box over another separate RDP session.

Basically, I want to RDP from the Internal LAN to the ISA Box. I tried publishing the RDP Server on the ISA box with the Internal NIC as the listener, but to no avail. I guess that's why I am lost...

(in reply to tad_braun)

Post #: 5

RE: Publish an RDP Server on the ISA box? - 23.Mar.2004 12:22:00 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tad,

Oh! In that case, you just need to create an Access Rule that allows the Internal clients access to the localhost network.

HTH,
Tom

(in reply to tad_braun)

Post #: 6

RE: Publish an RDP Server on the ISA box? - 23.Mar.2004 11:27:00 PM

tad_braun

Posts: 94
Joined: 31.Dec.2003
Status: offline

I shall give that a try right now! I could've sworn I did that earlier, but maybe I was suffering from lack of sleep (again)...but I guess that's kind of redundant for us IT folks, huh?

(in reply to tad_braun)

Post #: 7

RE: Publish an RDP Server on the ISA box? - 24.Mar.2004 2:02:00 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tad,

Ha! You bet.

Let us know how it works out for you.

Thanks!
Tom

(in reply to tad_braun)

Post #: 8

RE: Publish an RDP Server on the ISA box? - 26.Mar.2004 5:02:00 AM

tad_braun

Posts: 94
Joined: 31.Dec.2003
Status: offline

Hello,

I gave it a try, both with an Access Rule and with a Server Publishing rule, and neither worked. I don't know what I'm doing obviously...

Any tips on what I may be doing wrong? All servers are W2K3 Std. Ed., and I have the "Remote Control Allowed" (sic) checkbox checked in the remote admin area on the ISA Sever box.

I notice in the ISA Monitoring panel that the real time logs show a connect, and then a very quick disconnect. Why would it do that?

Thanks for hanging in there with me, I do appreciate it.

(in reply to tad_braun)

Post #: 9

RE: Publish an RDP Server on the ISA box? - 31.Mar.2004 12:08:00 PM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tad,

OK, try this.

Expose the System Policy and you'll find a System Policy rule for allowing remote management for RDP. Change the FROM entry to the IP address or network that you want to have access.

HTH,
Tom

(in reply to tad_braun)

Post #: 10

RE: Publish an RDP Server on the ISA box? - 1.Apr.2004 8:44:00 AM