Forum Discussion

Carlos_Garibay_'s avatar
Carlos_Garibay_
Icon for Nimbostratus rankNimbostratus
Jan 15, 2016
Solved

Deny RDP ACCESS

Hello,

 

I want to only allow access to my RDP pools via the web top or edge client. I want to deny connections to rdp pool via web.

 

Example

 

We host and virtual server with rdp pool with name abc.com. I want to force users to access that server through the web top Not by simply opening a rdp connections and typing abc.com

 

Is this something I do on the Big-ip? Or something done on my front end firewall?

 

Thanks Carlos

 

APM
LTM
security
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Jan 15, 2016

    Probably the easiest way to start trying to figure out what's different between different classes of users is:

     

    Make the connection via method A.

     

    Go view the user's session variables in BIG-IP GUI. Screenshot it or copy it someplace.

     

    Make the connection via method B.

     

    Go view the user's session variables again.

     

    Make a note of the difference between how the two set up sessions.

     

4 Replies

Sort By
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Historic F5 Account
    Jan 15, 2016

    Probably the easiest way to start trying to figure out what's different between different classes of users is:

     

    Make the connection via method A.

     

    Go view the user's session variables in BIG-IP GUI. Screenshot it or copy it someplace.

     

    Make the connection via method B.

     

    Go view the user's session variables again.

     

    Make a note of the difference between how the two set up sessions.

     

    • Carlos_Garibay_'s avatar
      Carlos_Garibay_
      Icon for Nimbostratus rankNimbostratus
      Jan 15, 2016
      ok when I connect to via webtop I see the session, but when I connect via regular mstsc I do not see a sessiong on the big Ip
    • Lucas_Thompson_'s avatar
      Lucas_Thompson_
      Historic F5 Account
      Jan 15, 2016
      OK, perfect! In that case you'll have to simply block this using Windows Firewall or some other firewall. Only allow the RDP connections from APM's self IPs (you probably would include the floating self IP and both non-floating self IPs).
  • Carlos_Garibay_'s avatar
    Carlos_Garibay_
    Icon for Nimbostratus rankNimbostratus
    Jan 15, 2016

    Thanks Lucas after looking at the sessions and what you said that makes sence.

     

    Thank you for your time

     

    Carlos