Network Access Manager disables RDP ability

[ishmaelj99]

Running Windows 7 Professional with Cisco AnyConnect version 4.3.0386 and Network Access Manager installed.  Our support staff needs the ability to RDP into workstations running the same OS and software.  They are unable to at this time.  What steps can be taken to still allow the RDP connections to other workstations?

[Georg Pauwen]

Hello,

what authentication method are you using ? Refer to the document below:

http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/anyconnectadmin30/ac15userguidelines.html#59689

[ishmaelj99]

Network Access with User-Only Authentication.  We have users that use Logon\Password and some that use PIV.

[Georg Pauwen]

Hello,

the problem is either with the AnyConnect client profile, or with the ASA (assuming that the VPNs are terminating on an ASA). What (error) message is displayed when your VPN clients tyr to establish an RDP session ?

[ishmaelj99]

Currently, the problem was noticed on our LAN.  I tried to RDP to another machine on the LAN and was unable to connect.  The last thing installed was NAM.  I removed NAM and then I was able to RDP without issue.  Earlier today I tried over VPN and again it failed trying to RDP to another machine on VPN and also a machine on the LAN.

Error Message:  Unable to connect due it internal error

Very vague error description.  VPNs are terminating on an ASA.