topic remote desktop through pix 515E in Network Security

remote desktop through pix 515E

JiawChang — Fri, 21 Feb 2020 07:59:02 GMT

I have a win2003 server behind cisco pix 515E and I certainly permit RDP port 3389. When I use remote desktop to connect the 2003 server through firewall and open the IE browser, the remote desktop always gets disconnected after I browse several web pages. But if I remove the pix firewall, the remote connection works fine. Is there any additional setting for pix I missed besides permit RDP port 3389? or probably I miss-configure the pix?

Re: remote desktop through pix 515E

Patrick Iseli — Mon, 28 Feb 2005 14:31:54 GMT

Have you configured NAT to connect with RDP ?

example config:

access-list outside_access_in line 1 permit tcp any host YourPublicIP eq 3389

# This will allow any host to RDP into RDPServer

static (inside,outside) tcp YourPublicIP 3389 192.168.1.x 3389 netmask 255.255.255.255 0 0

#Port Redirect tcp port 3389 RDP to 192.168.1.x

access-group outside_access_in in interface outside

# Apply access-list to interface

Of course a NAT (static) instead of a Port redirect will also work.

sincerely

Patrick

Re: remote desktop through pix 515E

JiawChang — Tue, 01 Mar 2005 01:50:17 GMT

Dear Patrick, thanks for your reply 🙂

I did set the static ip mapping and permit port 3389. So i can make the remote connection through remote desktop. It is so strange that when i open the browser in the remote desktop, it may get disconnected after browsing webs.