Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 26 replies
  • Subscribers 1 subscriber
  • Views 15441 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN and Remote Desktop

Damien
Hello

i successfully connect to my home network with Astaro SSL VPN Client. I am using latest Astaro 7.5. 

All network drives are available, connection seems perfect. If i try to open a remote desktop session using mstsc.exe, i get the remote windows login screen. after i submitted username and password it takes a while and then it disconnects me from VPN.

VPN Log Snippet
-------------------------------------
Tue Nov 17 16:26:30 2009 Connection reset, restarting [-1]
Tue Nov 17 16:26:30 2009 TCP/UDP: Closing socket
Tue Nov 17 16:26:30 2009 SIGUSR1[soft,connection-reset] received, process restarting
Tue Nov 17 16:26:30 2009 Restart pause, 5 second(s)
-------------------------------------
End of VPN Log Snippet

Somebody had the same problem? how can i solve it?

regards,
damien


This thread was automatically locked due to age.
  • 0
    Check your IPS log, if enabled; there are several IPS rules that you may need to disable to allow RDP.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    hi,
    i can't see something clear to me. perhaps you have an eye for it?

    ------------
    2009:11:17-16:26:13 my-fw openvpn[6428]: Re-using SSL/TLS context
    2009:11:17-16:26:13 my-fw openvpn[6428]: LZO compression initialized
    2009:11:17-16:26:13 my-fw openvpn[6428]: Control Channel MTU parms [ L:1556 D:140 EF:40 EB:0 ET:0 EL:0 ]
    2009:11:17-16:26:13 my-fw openvpn[6428]: Data Channel MTU parms [ L:1556 D:1450 EF:56 EB:135 ET:0 EL:0 AF:3/1 ]
    2009:11:17-16:26:13 my-fw openvpn[6428]: Local Options hash (VER=V4): 'a4f12474'
    2009:11:17-16:26:13 my-fw openvpn[6428]: Expected Remote Options hash (VER=V4): '619088b2'
    2009:11:17-16:26:13 my-fw openvpn[6428]: TCP connection established with YYY.YY.YY.YYY:59511
    2009:11:17-16:26:13 my-fw openvpn[6428]: TCPv4_SERVER link local: [undef]
    2009:11:17-16:26:13 my-fw openvpn[6428]: TCPv4_SERVER link remote: YYY.YY.YY.YYY:59511
    2009:11:17-16:26:13 my-fw openvpn[6428]: VPN_User/YYY.YY.YY.YYY:59497 Connection reset, restarting [-1]
    2009:11:17-16:26:15 my-fw openvpn[6428]: TCP/UDP: Closing socket
  • 0 in reply to Damien
    Wrong log... look in the IPS log... the Intrusion Prevention System log.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    IPS is not active on my ASG. another idea?
  • 0 in reply to Damien
    If you have IM/P2P blocking enabled, try turning that off (I've had false positives with that in the past).  Other than that, no idea.  Works fine on customer systems.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    also with IM/P2P filter disabled, it doesn't work. i've got really no idea what the problem is caused from. 

    i switched to VNC Server now as workaround...
  • 0
    [:@]I have a similar problem! I connect well with ssl vpn, and when I try to connect with remote desktop I get the windows login sreen, and after login I get the windows welcome sreen but after that it wont go to windows desktop but only show a black image for some seconds and puf...the remote connection drops.
    I had disabled the IPS and didn´t have IM and P2P active in my ASG 7500.
    Other simpthom...during this rdp connection, in the black screen part, my webmanager of the ASG seems to stop responding until the rdp drops.

    Forgot to say that in my home network RDP works fine. Another thing...using iphone Cisco VPN and an rdp program for Iphone, the problem and simpthoms are the same, so the problem resides in the ASG itself
  • 0
    Gnomme, I have WinAdmin on my iPhone; I just tested using the Cisco VPN - no problems.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Gnomme, I have WinAdmin on my iPhone; I just tested using the Cisco VPN - no problems.

    Cheers - Bob


    first...winadmin isn't available in iphone appstore so where did you get it?
    second...what is your ASG version, ips configs etc etc bla bla bla
  • 0 in reply to gnomme
    forgot to tell that I can connect trough rdp very well to an 2003 windows server. 
    The machine I can't connect is an Windows Seven! But only from outside I have problems!
Cookie Information Banner