This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RDP thru SSL VPN successful after 3 retries (Internal error)

Hello,

We are using a RDS Servers 2012R2 cluster with 4 Session hosts in a farm.

Connecting internally with RDP to the farm is succesfull but externally with the Sophos SSL VPN it takes up to 3 times to connect successfully.

The users are receiving an "Internal Error" message.

Any help would be appreciated.

Kind regards,

Rob.

This thread was automatically locked due to age.

sachingurung over 8 years ago

Hi Rob,

Did you mean that the RDP connections are successful and show no glitch once connected but, it takes 3 attempts everytime you try to connect through SSL VPN?

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
Klein BeerninkSupport over 8 years ago in reply to sachingurung

Hello Sachingurung,

That's correct, once connected they show no glitches.

Kind regards.
Cancel
Vote Up 0 Vote Down

Cancel
sachingurung over 8 years ago in reply to Klein BeerninkSupport

In that case, capturing a PCAP will give us an idea who sends the RESET packet. Take pcap from 2 ends:

1. Through UTM

2. From the RDP server

This will provide a brief idea about the issue.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
Klein BeerninkSupport over 8 years ago in reply to sachingurung

Can you give me any directions on how to use that?

Kind regards.
Cancel
Vote Up 0 Vote Down

Cancel
sachingurung over 8 years ago in reply to Klein BeerninkSupport

Hi,

Refer this : https://community.sophos.com/kb/en-us/115343 . It has steps to take a packet capture from the UTM's end. To packet capture on the server use Wireshark.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 8 years ago

Hi, Rob, and welcome to the UTM Community!

On the UTM, assuming that 10.2.0.1 is the address through which the RDP sessions are reached:

tcpdump -w \home\test.pcap -n -i eth0 src 10.2.0.1

There's a built-in packet capture utility in the 2012r2 server, but I've not played with that - I just use Wireshark.

Also, please show a picture of the error message so that we can understand the context.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
Klein BeerninkSupport over 8 years ago in reply to BAlfson

It appears that when i do an "ipconfig /flushdns" before starting the RDP connection everything is fine.

If i don't do that after setting up the Sophos VPN, it is almost impossible in some cases to connect to the RDS farm using RDP on a Windows 7, 8.1 or Windows 10 Workstation.
Cancel
Vote Up 0 Vote Down

Cancel
sachingurung over 8 years ago in reply to Klein BeerninkSupport

Hi,

Go to Remote Access> Advance, configure UTM as the DNS server for the remote clients.

Does that help?

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel