remote desktop through pix 515E

[JiawChang]

I have a win2003 server behind cisco pix 515E and I certainly permit RDP port 3389. When I use remote desktop to connect the 2003 server through firewall and open the IE browser, the remote desktop always gets disconnected after I browse several web pages. But if I remove the pix firewall, the remote connection works fine. Is there any additional setting for pix I missed besides permit RDP port 3389? or probably I miss-configure the pix?

[Patrick Iseli]

Have you configured NAT to connect with RDP ?

example config:

access-list outside_access_in line 1 permit tcp any host YourPublicIP eq 3389

# This will allow any host to RDP into RDPServer

static (inside,outside) tcp YourPublicIP 3389 192.168.1.x 3389 netmask 255.255.255.255 0 0

#Port Redirect tcp port 3389 RDP to 192.168.1.x

access-group outside_access_in in interface outside

# Apply access-list to interface

Of course a NAT (static) instead of a Port redirect will also work.

sincerely

Patrick

[JiawChang]

Dear Patrick, thanks for your reply :)

I did set the static ip mapping and permit port 3389. So i can make the remote connection through remote desktop. It is so strange that when i open the browser in the remote desktop, it may get disconnected after browsing webs.