SSL/TLS decryption with RDP

Question

Hi all, 
 I was playing with SSL/TLS decrpytion and it breaks RDP connecyions with error "The Local Security Authority cannot be contacted". 
 The only exception that works is if I make the excpetion for the address I am connecting to, which is extremly unpractical. 
 Anybody encountered a similar problem? fw version is 19.5.2 
 Denis

LHerzog · Answer

yes, if your RDP machines have self-issued certificates for RDP - which is what most customers will have - you will get that errors by TLS decryption. 
 If these machines belong to an active directory, it may help to connect them with FQDN server1.yourdomain.local and put yourdomain.local in TLS exception group. That way only one exception would be required.

SSL/TLS decryption with RDP

Top Replies