Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 29 subscribers
  • Views 8400 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall RDP Not working

pieterknecht

Hi !,

 

i have been stroubling with our XG firewall SFVH (SFOS 17.1.1 MR-1)

i am trying to get RDP working for 1 of our pc's. (ip adres is 192.168.120.3)

if i use it internal it is working correct.

but from outside it is not working.

 

this is what i have setup ,   ip adres of the firewall is = 192.168.120.240

hope somebody can help me



This thread was automatically locked due to age.
Parents
  • 0

    Hi there,

    It appears you have the destination address pointed at the inside address of the firewall.  Think rule flow from top to bottom;  you want to allow_RDP on the WAN zone using the Outside WAN network on port rdp61138 and Forward it to 'Evan' in the LAN zone.

    Change the destination host to your WAN adapter (Usually port 2) under Destination & Service

    I assume the rdp61138 service is configured to listen on port 61188 and you want the firewall rule to redirect to port 3389, then you will need to check the box 'change dest port' under Mapped Port and set it to 3389.

    Andre

Reply
  • 0

    Hi there,

    It appears you have the destination address pointed at the inside address of the firewall.  Think rule flow from top to bottom;  you want to allow_RDP on the WAN zone using the Outside WAN network on port rdp61138 and Forward it to 'Evan' in the LAN zone.

    Change the destination host to your WAN adapter (Usually port 2) under Destination & Service

    I assume the rdp61138 service is configured to listen on port 61188 and you want the firewall rule to redirect to port 3389, then you will need to check the box 'change dest port' under Mapped Port and set it to 3389.

    Andre

Children
  • 0 in reply to Andre Thibodeau

    Hi Andre,

     

    thank you for your answer.

    i Tried the setting but still no succes.

    just to be sure :

    my Incoming port from our Modem is port 2 (192.168.178.2) all the settings in that modem are correct (Tested with a other router)

    Our XG Firewall is used as a dhcp server , on port 1 (192.168.120.240 is the firewall adress)  our network switch is connected.

    on the service i got the settings that port 1:61338 goes to port 3389.

     

  • 0 in reply to pieterknecht

    Hi there,

    Looks like you are 'double natted', meaning your ISP modem is also acting as a firewall.  192.168.X.X is private addressing used for internal networks.

    Contact your ISP and have them change your modem mode or assist in changing the modem settings so your XG gets a routable IP address and not a 192.168 address.

     

    Andre

  • 0 in reply to pieterknecht

    Hi pieterknecht,

     

    You may first need to check if the traffic actually reaches XG device or not.

    Take a packet capture refer https://community.sophos.com/kb/en-us/123189

    String : port 3389

    If there is any traffic incomming from WAN then your Network Broder Gateway is forwarding the request and we can dig more in XG. If not then check your actual puclic address , your XG does not have a Public address and has a Private address which is Natted by another ISP device. 

    If you have access of such device then create a DNAT or Virtual host of the same to your XG's WAN interface.

    If not then you may need to check with your ISP, you may simply google from local IP "What is my Ip ?" and it should tell you the Public address you would need to RDP to.