RDP auf SSL-VPN Geräte

Hi Marius,

See the thread

https://community.sophos.com/products/xg-firewall/f/intrusion-prevention/119349/controlling-remote-ssl-clients

Regards
Jan

Hi Jan,

thanks for your quick reply.

Unfortunately, that doesnt work not for me.

Here screenshots of my configuration:

Thanks!

Does this Rule LAN to VPN have any Data ticker? 

How do you open the RDP Session? 

Hi,

yes it has. But i just edit the existing rule of this post:

https://community.sophos.com/kb/en-us/122769

I started a ping with -t to the connected Laptop with IP 10.81.234.6, but all pings failed.


Should i separate the Firewall rules?

Assuming this Rule will not Match, because you use Authentication.

Build a new Rule, LAN (Server IP) to VPN. This should hit. 

Your Server is not in Remote SSLVPN Group, so this rule will not work for the Server. 

Assuming this Rule will not Match, because you use Authentication.

Build a new Rule, LAN (Server IP) to VPN. This should hit. 

Your Server is not in Remote SSLVPN Group, so this rule will not work for the Server. 

Perfect! Now it works!

Thanks a lot!

Hello again!
Sorry, I don't think I tested it clearly. The colleagues have the laptops at home. So they are all in their private wifi at home. They are connected with SSL VPN (traffic light), having IPs like 10.81.234.XX.
But i still can´t ping the laptops from the server or start a RDP session with them. It only works, of they are in the same wifi/network like the server is. Then i can ping and start rdp with die VPN-IPs.
I have now just one firewall rule added, as you told:

Hope, you can help me. And sorry for my english... :-/

Thanks! :-)

Hi Gawo,

Your problem may be solved by the following configuration: Install sslVPN client on the server and connect (same as on remote stations). If the FW and VPN rules are ok then it should work as long as the firewall on remote stations does not block traffic.

Regards
Jan

Hi Jan,

i tried this, but it doesn´t work...

I added VPN to source, now it works:

Thanks a lot! :-)