Forum Discussion

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Oct 03, 2017

BIG-IP v13 native RDP - VDI connection failure

We have a problem where the user clicks on a link in a webtop which is a native RDP link, their application opens but the connection fails. Tcpdumps show for failed connections client traffic arrives...
application delivery
BIG-IP Access Policy Manager (APM)
vdi
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Oct 09, 2017

    Summary

    Native RDP connections that use SSO variables fail to work reliably.

    Version

    BIG-IP 13.0.0 HF2

    Symptoms

    RDP connections intermittently fail to connect. The following message appears when you try to connect to the RDP session. 
    "Your computer cannot connect to the Remote Desktop Gateway server. 
Contact your network administrator for assistance."

    This occurs under the following conditions

    • The virtual servers listens on a specific VLAN.

    Workaround

    Choose one of the following options:

    Option 1: Enabled the virtual server to listen on all VLANS.

    Option 2: Disable CMP on the virtual server - see K14358

    Option 3: Virtual Edition only, set vCPU to one.

    Solution

    Hotfix to address this issue.
smouzakis's avatar
smouzakis
Icon for Nimbostratus rankNimbostratus

Have you applied the default certificate on VS?

 

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Oct 03, 2017

No, using a valid SSL certificate. For everyone elses knowledge ... a valid SSL cert is required by native RDP for the MSRDP client to trust the RDP file. This is because APM signs the RDP file with the SSL private key of the virtual server.