[7.450][DUPE][OPEN] Remote Desktop ssl tunnel

[gnomme]

If IPS is enabled remote desktop connections trough SSL VPN do not work. If I stop the service and try again It works

[BAlfson]

Gnomme, do you mean stop/start IPS while you have an SSL VPN session running, or that it only works when IPS is stopped?

Cheers - Bob

[gnomme]

Originally Posted by BAlfson

Gnomme, do you mean stop/start IPS while you have an SSL VPN session running, or that it only works when IPS is stopped?

Cheers - Bob

yes! however some hours later when I make another vpn connection the same problem happens

[BAlfson]

"Yes" ???

Is it "A" or "B" ?

A. It works after you "stop/start IPS while you have an SSL VPN session running"

B. "it only works when IPS is stopped"

Cheers - Bob

[gnomme]

sorry...stop/start

[dmzalarm]

hmm, I use TS over ssl vpn daily and I don't have this problem on my beta instances. Did you see anything in packet filter logs?

[BrucekConvergent]

Check your IPS logs; chances are you are experiencing a IPS rule that's being falsely triggered; when you see the rule sid in the log, just add it to the disabled rule list in the advanced tab under Intrusion Protection configuration.

[ee-tra]

@gnomme
Can you please specify which rules are causing the drops?
Just posting the SIDs would be great, thanks.

[gnomme]

I thont know wich rule is...I used VPN a lot in my previous version of ASG with no problem. the configurations was imported from the older

[BAlfson]

Gnomme, ee-tra wants you to look in your Intrusion Protection log to see what rules are listed when this traffic is blocked.

Cheers - Bob