For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Oct 03, 2017
Solved

BIG-IP v13 native RDP - VDI connection failure

We have a problem where the user clicks on a link in a webtop which is a native RDP link, their application opens but the connection fails. Tcpdumps show for failed connections client traffic arrives...
application delivery
BIG-IP Access Policy Manager (APM)
vdi
  • Kevin_Davies_40's avatar
    Kevin_Davies_40
    Oct 09, 2017

    Summary

    Native RDP connections that use SSO variables fail to work reliably.

    Version

    BIG-IP 13.0.0 HF2

    Symptoms

    RDP connections intermittently fail to connect. The following message appears when you try to connect to the RDP session. 
    "Your computer cannot connect to the Remote Desktop Gateway server. 
Contact your network administrator for assistance."

    This occurs under the following conditions

    • The virtual servers listens on a specific VLAN.

    Workaround

    Choose one of the following options:

    Option 1: Enabled the virtual server to listen on all VLANS.

    Option 2: Disable CMP on the virtual server - see K14358

    Option 3: Virtual Edition only, set vCPU to one.

    Solution

    Hotfix to address this issue.
leonline_225556's avatar
leonline_225556
Icon for Altostratus rankAltostratus
Jun 07, 2018

I am still having this issue running 13.1.0.2, in my situation the vs is running in a non-default route domain.

 

F5 confirmed we are dealing with bug ID 623036 - Native RDP proxy does not work if Virtual Server is in non-default route domain and CMP enabled. This bug is linked to bug ID6 17929 Support non-default route domains when connecting to other tmm over backplane.

 

Unfortunately no fix is available yet.