This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RDP auf SSL-VPN Geräte

Hallo zusammen!

Ich bin nach dieser Beschreibung zur Einrichtung des SSL-VPN vorgegangen:

Das hat auch soweit super funktioniert.

Wir haben ca. 10 Laptops, die sich via SSL-VPN Client verbinden, soweit so gut. Diese Laptops gehören zu unserer Domäne. Nun möchte ich vom Server aus per RDP auf die Laptops, um z.B. ein Programm zu installieren o.Ä.

Das klappt leider nicht. Die Laptops selbst können den Server bzw Geräte innerhalb des Unternehmens pingen und auch RDP-Verbindungen aufbauen, jedoch umgekehrt, wie beschrieben, leider nicht.

Hat jemand eine Idee?

Vielen Dank vorab und schöne Ostern!

Marius

This thread was automatically locked due to age.

Parents

0 JanSadlik over 4 years ago

Hi Marius,

See the thread

https://community.sophos.com/products/xg-firewall/f/intrusion-prevention/119349/controlling-remote-ssl-clients

Regards
Jan
Cancel
Vote Up 0 Vote Down

Cancel
0 Gawo over 4 years ago in reply to JanSadlik

Hi Jan,

thanks for your quick reply.

Unfortunately, that doesnt work not for me.

Here screenshots of my configuration:

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Gawo

Does this Rule LAN to VPN have any Data ticker?

How do you open the RDP Session?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Gawo over 4 years ago in reply to LuCar Toni

Hi,

yes it has. But i just edit the existing rule of this post:

https://community.sophos.com/kb/en-us/122769

I started a ping with -t to the connected Laptop with IP 10.81.234.6, but all pings failed.

Should i separate the Firewall rules?
Cancel
Vote Up 0 Vote Down

Cancel
+1 LuCar Toni over 4 years ago in reply to Gawo

Assuming this Rule will not Match, because you use Authentication.

Build a new Rule, LAN (Server IP) to VPN. This should hit.

Your Server is not in Remote SSLVPN Group, so this rule will not work for the Server.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Gawo over 4 years ago in reply to LuCar Toni

Perfect! Now it works!

Thanks a lot!
Cancel
Vote Up 0 Vote Down

Cancel
0 Gawo over 4 years ago in reply to LuCar Toni

Hello again!
Sorry, I don't think I tested it clearly. The colleagues have the laptops at home. So they are all in their private wifi at home. They are connected with SSL VPN (traffic light), having IPs like 10.81.234.XX.
But i still can´t ping the laptops from the server or start a RDP session with them. It only works, of they are in the same wifi/network like the server is. Then i can ping and start rdp with die VPN-IPs.
I have now just one firewall rule added, as you told:

Hope, you can help me. And sorry for my english... :-/

Thanks! :-)
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Gawo over 4 years ago in reply to LuCar Toni

Hello again!
Sorry, I don't think I tested it clearly. The colleagues have the laptops at home. So they are all in their private wifi at home. They are connected with SSL VPN (traffic light), having IPs like 10.81.234.XX.
But i still can´t ping the laptops from the server or start a RDP session with them. It only works, of they are in the same wifi/network like the server is. Then i can ping and start rdp with die VPN-IPs.
I have now just one firewall rule added, as you told:

Hope, you can help me. And sorry for my english... :-/

Thanks! :-)
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 JanSadlik over 4 years ago in reply to Gawo

Hi Gawo,

Your problem may be solved by the following configuration: Install sslVPN client on the server and connect (same as on remote stations). If the FW and VPN rules are ok then it should work as long as the firewall on remote stations does not block traffic.

Regards
Jan
Cancel
Vote Up 0 Vote Down

Cancel
0 Gawo over 4 years ago in reply to JanSadlik

Hi Jan,

i tried this, but it doesn´t work...

I added VPN to source, now it works:

Thanks a lot! :-)
Cancel
Vote Up 0 Vote Down

Cancel