topic Re: RDP is not working with Cisco NAM (User and Machine Auth) in Network Access Control

RDP is not working with Cisco NAM (User and Machine Auth)

oleg_kobzar — Fri, 21 Feb 2020 18:53:32 GMT

RDP to Windows 10 machine is not working when Cisco NAM is used instead native Windows supplicant. The case is below:

1) PC is turned on and passed machine authentication

2) RDP is initiated to PC and user authentication passed. But RDP is not established.Windows Firewall blocks this traffic, even if there is a permit rule in its configuration (tcp/udp from any source to port 3389)

3) Machine authentication is passed again.

User and Machine VLAN are the same. It works only if user is locally login into PC( user authentication on switch port) or if Windows Firewall is disabled. Logs are below.

2018-03-30 16:08:52 DROP TCP 172.27.235.51 172.27.235.53 51817 3389 0 - 0 0 0 - - - RECEIVE
2018-03-30 16:08:52 DROP UDP 172.27.235.51 172.27.235.53 62652 3389 0 - - - - - - - RECEIVE

Does anyone use such deployment of 802.1x with Cisco NAM?

Re: RDP is not working with Cisco NAM (User and Machine Auth)

Octavian Szolga — Thu, 12 Apr 2018 08:35:32 GMT

Hi,

It's working as expected 🙂

https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect45/administration/guide/b_AnyConnect_Administrator_Guide_4-5.pdf

Re: RDP is not working with Cisco NAM (User and Machine Auth)

oleg_kobzar — Thu, 12 Apr 2018 09:20:38 GMT

Hi Octavian,

Thanks a lot for your reply.

But could you please specify why it is not working. I tried to check the configuration guide but changing registry key EnforceSingleLogon didn`t help.

Is it possible to modify anything to have working RDP for this case?

I hope you will answer and show the the direction because at this moment neither Cisco or MS can help me.

Re: RDP is not working with Cisco NAM (User and Machine Auth)

Octavian Szolga — Thu, 12 Apr 2018 10:22:24 GMT

Hi Oleg,

Please check if windows firewall is completely off just to exclude this as a possible issue.

Also, make sure you've added the correct dword in registry to allow RDP with a different user than the currently logged in user.

I've tested this in the past and it worked.

Thanks,

Octavian

Re: RDP is not working with Cisco NAM (User and Machine Auth)

DHaya — Wed, 28 Aug 2019 11:50:09 GMT

Its known bug,

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo47467

Work around as below.

1. In Registry Editor, locate the following registry subkey:
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy
2. Right-click the Parameters registry subkey, point to New, and then click DWORD (32-bit) Value.
3. Rename the new registry entry to IntfQuarantineEnabled and set the value to 0.

Hope this helps