Allowing RDP access to ISA Server

[adamf]

We have ISA 2006 in place and we've just started using a Secure Access SSL VPN service provided by our ISP. RDP connections to every other server except the ISA server work fine. I've added a access rule to the firewall policy in ISA allowing the RDP protocol access to the server but still I cannot remote desktop to it from the VPN app.

 

When I look in the ISA server logs it is showing that it has denied the connection to destination port 3389.

 

Any ideas on how to fix this?

 

Adam.

[SYNACK]

What ip address does your remote client get when connected through the SSL VPN. If it is not in your internal network range you may need to add it into your rule under the sources. I'm assuming that you have got it applied as a rule allowing access to the local host adapter in the ISA config as using the ip directly sometimes does not apply properly for the local interface(at least on the older versions).

 

You may also want to try running the BPA tool to see if anything is up. http://www.microsoft.com/technet/isa/downloads/2006/tools/default.mspx

 

Oh and just to make sure you have checked that RDP is enabled in Windows. I remember wasting at least 5 minutes on that one time.

[adamf]

I have tried that. I've just look at the logs from ISA again and it appears that the rule blocking the access is the deafult rule.

 

Any other ideas?

 

 

Adam.

[localzuk]

Is the rule which allows access above the default rule?

[sidewinder]

Have you edited the system policy and added your machine/ip address to the remote management computers group?

 

Until you do that remote desktop to the ISA server wont work. At least thats how it is in 2004 anyway

[adamf]

sidewinder! Spot on! Its working now! Thanks very much!

[sidewinder]

Excellent, no problem