TS inside Cisco ASA firewall

[BigBadVinny]

Our Terminal Service server has 2 network cards, 1 with a public address and 1 with the local LAN address and we rely on the ADSL router and windows for firewall protection.

 

I want to deploy a Cisco ASA5510 firewall with an Outer, DMZ and Inner network.

 

Does anyone know if it is possible to have the 2 carded TS server working on the Inner network? Or would I have to configure things differently.

 

The TS server is also the PDC (bad I know but legacy) so I didn't want it in the DMZ

 

Thanks for any help

 

BBV

[Tom_ONI]

You can certainly have a DMZ with outer, DMZ and innter network.

 

you could have the adsl connected to the ASA, then the ASA to the network and the Termial server, or terminal server then network - there's more than one way to skin a kat as they say.

 

What exactly are you looking to achieve?

 

Tom

[BigBadVinny]

What I really need to know is

 

Can I use Terminal Services to a public IP address which is on the inner LAN?

 

 

Tks

[Tom_ONI]

It depends on the configuration of the internal network, but as I understand it you would want to map a private internal address to a public IP. You could then get to your terminal services.

[djm968]

The "gottcha" here is the default gateways. If you specify a DG on both connections, RDP will use the gateway on the internal card for outbound communication and the connection will be refused.

[BigBadVinny]

I have just found out that if you set the internal LAN interface of the ASA5510, to security level 100, it will not allow a public IP address to be processed from the inner LAN direction. Quite right I suppose!

 

Thanks for your help

 

BBV