Cisco ASA 8.3 VPN SSL clientless RDP application

[c.valenti]

Hi all,

I need to reach a server with RDP throught an ASA 5510 8.3 from Internet.

A client (without anyconnect, via SSL connection) must find a bookmark on portal with RDP connection to this server.

How can I create a bookmark with RDP access? Is it possible without a plugin? Is it possible with port forwarding?

Thanks

[Marcin Latosiewicz]

RDP or RDP2 plugin would be the way to go.

Alternative smart-tunneling of mstsc.exe program, BUT there would not be a typical bookmark there.

If you decide to go via plugin everything is done via ASA:

- upload rdp or rdp2 plugin to the ASA.

- now you should be able to choose rpd:// and rdp2:// as protocols when creating bookmarks.

- you can also add more parameters.

Check out the configuration guide for clientless.

Marcin

[c.valenti]

Thank you Marcin,

but where can I find the plugin? I need to download it from Cisco? If yes, hich kind of Cisco account I need?

[Marcin Latosiewicz]

Plugins can be downloaded from here:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/webvpn.html#wp1292902

I'm not sure what kind of account credentials you might need. I didn't hear any problems with access ;-)

Note: those might not be the latest versions.

Marcin

[c.valenti]

Can you read in this image? I don't understand this error.

Thank you in advance

[Marcin Latosiewicz]

What exactly did you put into each field?

It looks like it dosn't agree with ASA.

Marcin

[Marcin Latosiewicz]

I had another look at this.

I've seen this symptom only if you run a recent version of ASDM with older version of ASA.

I've seen it with ASDM 6.3.1 and ASA 8.0.4.

The ASDM executes in the bckground command "show import webvpn plug-in detail" and gets a response of "ERROR: ..." because syntax doesn't agree in older ASA versions.

Marcin

[Marcin Latosiewicz]

Following bug has been filed and should be visible in 24 hours.

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtj78026

Marcin

[c.valenti]

Thank you Marcin,

The plug-in was successfull imported.

But if I try to create a bookmark with suffix RDP the bookmark does not appear on the portal. I don't understand why, no error appears.

Regards

Cristiano

[Marcin Latosiewicz]

Cristiano,

Show me screenshot from ASDM.

Where you defined the bookmakrs, show me where the plugins have been imported.

And while you're connected.

Show me "show vpn-session web"

What I'd like to see is that:

1) Plugins are imported

2) Plugins are properly defined in bookmarks

3) You're using correct group-policy - where bookmarks are defined ;-)

marcin