F5 Bigip as RDG Gateway, Windows 2016 Server

Question

Hello,&nbsp;
i would like to youse my F5 Bigip 12.1.3 to act as a RDG Gateway. i used the iApp version for this scenario. &nbsp;
I have created successfully a NTML machine account in a Windows Server 2016 active Directory. When i connect via Remote Destopk i get invalid TS gateway credential.&nbsp;
I i use an NTML machine account in a Windows Active Dirextory 2012, the setop works as expected.&nbsp;
Is there any issue known between F5 acts as an RDP gatway and Windows Server/Active Directory 2016?&nbsp;
Best regards
Heiko&nbsp;

niels_van_sluis · Answer

It seems that Microsoft Server 2016 isn't supported yet. See section 'Remote Desktop Gateway Compatibility Matrix':
https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-clientcompatmatrix-12-1-3.html
However, I found this post. Seems like a registry change under Microsoft Windows Server 2016 could solve the problem.
https://devcentral.f5.com/questions/windows-server-2016-rdp-from-apm-53075
We found out that we need to change a registry key on any windows 10 or windows server 2016

Navigate to this Key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp

Change “SecurityLayer” to a zero

It seem that the F5 Big-Ip act as a really old rdp client and it's blocked by Windows 10 or Windows Server 2016 even if on the GUI it's allowing connection from an older RDP client.

Forum Discussion

F5 Bigip as RDG Gateway, Windows 2016 Server

1 Reply

Recent Discussions

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Enabling AVR and creating Profiles

Get associated pool name from VIP IP using F5-LTM

Disacard SSL::cert mode to ignore when default SSLClient profile is set to request or require

About custome Response Blocking Page

Related Content

Integrating SSL Orchestrator with McAfee Web Gateway-Transparent Proxy

Using BIG-IP Kubernetes Gateway API Controller

Integrating SSL Orchestrator with McAfee Web Gateway-Explicit Proxy

Get Started With Kubernetes SIG Gateway API

Integrating F5 BIG-IP with Kubernetes SIG Gateway API