Sophos Firewall

Discussions NAT port forwarding remote desktop in XG 230 v18.0.1 MR-1-Build396

Sophos Firewall requires membership for participation - click to join

Thread Info

State Suggested Answer
Locked Locked
Replies 4 replies
Answers 1 answer
Subscribers 28 subscribers
Views 3832 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NAT port forwarding remote desktop in XG 230 v18.0.1 MR-1-Build396

Figo Tung Ton over 5 years ago

Hi everyone,

My model:

XG 230 v18.0.1 MR-1-Build396

LAN network: 192.168.1.0/24 - port 1

WAN network: port 2

My windows server: 192.168.1.240

I need to config users from internet can access to my windows server via remote desktop via port 8xxx.

Please support?

Thanks!

This thread was automatically locked due to age.

0 Vishal_R over 5 years ago

Hi Figo Tung Ton

Please refer below KBA and video for more information on DNAT configuration:

https://community.sophos.com/kb/en-us/122976
Cancel
Vote Up 0 Vote Down

Cancel
0 2ServeErik over 5 years ago

Hi Figo Tung Ton

In addition to Vishal_R's information I would strongly advise you not to expose RDP directly to the internet.

Please check out this KBA https://community.sophos.com/kb/en-us/134100 (CVE-2019-0708: Remote Desktop Services remote code execution vulnerability (known as BlueKeep)

No matter what the Windows version is, I advise you to implement the "Recommended actions".

For setting up a VPN for your users refer to https://community.sophos.com/kb/en-us/122769 for a SSL VPN or https://community.sophos.com/kb/en-us/133109 for an IPSEC VPN.

Regards

Erik
Cancel
Vote Up 0 Vote Down

Cancel
0 Figo Tung Ton over 5 years ago in reply to Vishal_R

Thank you Vishal_R i will try this method.
Cancel
Vote Up 0 Vote Down

Cancel
0 Figo Tung Ton over 5 years ago in reply to 2ServeErik

2ServeErik said:

Hi Figo Tung Ton

In addition to Vishal_R's information I would strongly advise you not to expose RDP directly to the internet.

Please check out this KBA https://community.sophos.com/kb/en-us/134100 (CVE-2019-0708: Remote Desktop Services remote code execution vulnerability (known as BlueKeep)

No matter what the Windows version is, I advise you to implement the "Recommended actions".

For setting up a VPN for your users refer to https://community.sophos.com/kb/en-us/122769 for a SSL VPN or https://community.sophos.com/kb/en-us/133109 for an IPSEC VPN.

Regards

Erik

Thanks for your support 2ServeErik
Cancel
Vote Up 0 Vote Down

Cancel