Hello Sophos forum users, I am currently accessing my web server trough the WAF and it is working splendidly. The problem I am having is routing(and allowing) RDP access to the windows server that is running it. I have attempted to route with the rule: For the going to i tried it both as this and as Rule #4 from rulz suggested My logic is that traffic from any IP (security currently isn't an issue), trying to RDP onto the IP of my UTM would get routed towards the internal server. Could you please help my find fault in my logic since this isn't working. Much Regards

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing RDP trough the UTM with DNAT

Hello Sophos forum users,

I am currently accessing my web server trough the WAF and it is working splendidly.

The problem I am having is routing(and allowing) RDP access to the windows server that is running it. I have attempted to route with the rule:

For the going to i tried it both as this and as Rule #4 from rulz suggested

My logic is that traffic from any IP (security currently isn't an issue), trying to RDP onto the IP of my UTM would get routed towards the internal server.

Could you please help my find fault in my logic since this isn't working.

Much Regards

This thread was automatically locked due to age.

Parents

0 BAlfson over 7 years ago

Also, Edo, instead of the "Any" network object, use "Internet." Although "Any" should work, a DNAT will only work for traffic coming in from the Internet. See Accessing Internal or DMZ Webserver from Internal Network to understand why using "Internet" with a DNAT is a better habit.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 7 years ago

Also, Edo, instead of the "Any" network object, use "Internet." Although "Any" should work, a DNAT will only work for traffic coming in from the Internet. See Accessing Internal or DMZ Webserver from Internal Network to understand why using "Internet" with a DNAT is a better habit.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data