F5 APM and Remote Desktop Gateway

Question

I'm having a weird issue with RDG and APM currently single sign on works internally and externally however when we try to launch any app externally it is saying unable to connect to the remote desktop gateway internally this works perfectly. Even weirder when I just load balance the RDG servers without APM everything works fine externally/internally which makes me think there is no firewall issue. Right now we have a VIP with APM and SSO is configured as below:&nbsp;NameRDSPartition / PathCommonSSO MethodFormsCredentials Source&nbsp;Username Source session.sso.token.last.usernamePassword Source session.sso.token.last.passwordSSO Method Configuration&nbsp;Start URI /RDWeb/Pages/en-US/login.aspx&nbsp;Pass Through&nbsp;Enable&nbsp;Form Method&nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;POST&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;Form Action&nbsp;Form Parameter For User Name DomainUserNameForm Parameter For Password UserPass&nbsp;Hidden Form Parameters/ValuesSuccessful Logon Detection Match Type&nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;None&nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;By Resulting Redirect URL&nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;By Presence Of Specific String In Cookie&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;&nbsp; &nbsp;Successful Logon Detection Match Value/RDWeb/Pages/en-US/default.aspx

fsckeith · Answer

Were you ever able to find the answer to your issue?  I imagine you saw a new session appear with each "click" of the RDS resource when using the external context.  When you increased logging, did you see the SSO failures?

thomson_thomas · Answer

our problem was we needed an RDS server facing the internet to get this to work, this wasnt approved so we went forward with 2FA through AWS.

Forum Discussion

F5 APM and Remote Desktop Gateway

Recent Discussions

Problem with lets encrypt and redirect after update

Should config via cli rather than gui?

Is a Dedicated Interface, VLAN, and Self IP Required for a VIP in an F5 Configuration?

question about getting hsl data to be formatted properly in splunk

iRule for client certificate verification and inserting CN

Related Content

Two-Factor Authentication – Remote Desktop Gateway

Remote Desktop Web Access and Remote Desktop Gateway SSO Through APM

EC certificate breaks remote desktop

Remote Desktop Protocol (RDP) using an SSL VPN

Microsoft Remote Desktop Gateway servers iApp

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS