Forum Discussion

Carlos_Garibay_'s avatar
Carlos_Garibay_
Icon for Nimbostratus rankNimbostratus
Jan 15, 2016

Deny RDP ACCESS

Hello,

 

I want to only allow access to my RDP pools via the web top or edge client. I want to deny connections to rdp pool via web.

 

Example

 

We host and virtual server with rdp pool with name abc.com. I want to force users to access that server through the web top Not by simply opening a rdp connections and typing abc.com

 

Is this something I do on the Big-ip? Or something done on my front end firewall?

 

Thanks Carlos

 

  • Probably the easiest way to start trying to figure out what's different between different classes of users is:

     

    Make the connection via method A.

     

    Go view the user's session variables in BIG-IP GUI. Screenshot it or copy it someplace.

     

    Make the connection via method B.

     

    Go view the user's session variables again.

     

    Make a note of the difference between how the two set up sessions.

     

  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account

    Probably the easiest way to start trying to figure out what's different between different classes of users is:

     

    Make the connection via method A.

     

    Go view the user's session variables in BIG-IP GUI. Screenshot it or copy it someplace.

     

    Make the connection via method B.

     

    Go view the user's session variables again.

     

    Make a note of the difference between how the two set up sessions.

     

    • Carlos_Garibay_'s avatar
      Carlos_Garibay_
      Icon for Nimbostratus rankNimbostratus
      ok when I connect to via webtop I see the session, but when I connect via regular mstsc I do not see a sessiong on the big Ip
    • Lucas_Thompson_'s avatar
      Lucas_Thompson_
      Historic F5 Account
      OK, perfect! In that case you'll have to simply block this using Windows Firewall or some other firewall. Only allow the RDP connections from APM's self IPs (you probably would include the floating self IP and both non-floating self IPs).
  • Thanks Lucas after looking at the sessions and what you said that makes sence.

     

    Thank you for your time

     

    Carlos