Allowing RDP to pass through ZBF

Ronald Nutter — Mon, 11 Mar 2019 17:58:21 GMT

I am setting up ZBF for a remote office that has a single server that needs to be reachable via the Internet. So that I can get into the server remotely since it is on a standalone connection from our MPLS network, I have entered the following lines into the router config -

ip access-list extended ACL_RDP

permit tcp any host x.x.x.x eq 3389

class-map type inspect match-all RDP

match access-group name ACL_RDP

policy-map type inspect ccp-policy-ccp-cls--1

class type inspect RDP

inspect

When I type the class type line, I get an error %No specific protocol defined in class RDP for inspections all protocols will be inspected.

Is there a better way to do the allowing of RDP through the firewall ?

Is the error I listed anything to worry about ?

Ron

Re: Allowing RDP to pass through ZBF

Diego Armando Cambronero Arias — Wed, 23 Jun 2010 14:28:33 GMT

Hello,

That messasge is not a problem. But you can specify in your class map a protocol and a port. You could match protocol TCP and port 3389 instead of using the ACL. That way the message log will not appear. But your current config must be working fine

topic Allowing RDP to pass through ZBF in Network Security

Allowing RDP to pass through ZBF

Re: Allowing RDP to pass through ZBF