We took on a new client and replaced their Netgear router with an SG105w. The client office is in another region so it is all remote. The long term goal was SSLVPN synced with AD, then allowing the users to use RDP once authenticated. Problem is that since the UTM has been in place, the RDP connections frequently disconnect. Then will reconnect. Windows event logs are clean. We've spoken to the ISP (Charter) a few times but it has not been escalated within their ranks. They'll bounce the modem for us but won't do much more. They point the issue downstream at our router. As yet, we have not used any packet sniffing tools on their network. We have used ping plotter (clean hops out). Sophos support has gone so far as to send us a new UTM and we have rebuilt the configuration. Sophos support was not able to discern much at all from their analysis of the problem (hence the new device ship). All services such as web filtering, IPS, advanced threat protection, are OFF. DNAT rule is straightforward: Traffic from ANY using service Microsoft Terminal Services(RDP) going to External WAN (Network) change the destination to "server" (internal network object). Automatic firewall rule has been created. Firmware version is 9.408-4. RDP works for a bit then will disconnect.
When we switch back to the Netgear, order is restored. No RDP disconnects occur.
Has anyone run into anything similar to this? I feel like it could be ISP related but what if anything could they do?
This thread was automatically locked due to age.
