WSA S160 Support for Terminal Servers (How are terminal server connections handled?)

[dfiling]

We have a terminal server environment with a mixture of computers and laptops. Currently we have multiple proxy servers and would like to considate down to one. Our current solution does not work well in a terminal server environment. We are looking for a way to integrate all equipment with one soluton and I was curious as to how the S160 handled users connecting via a terminal server.

[edadios]

Hello,

The WSA will work with HTTP, HTTPS and FTP on port configured.

It will not do anything with other application or port, not configured for HTTP, HTTPS or FTP, or otherwise using the ports, but using non standard protocol, not matching HTTP, HTTPS or FTP protocol implementation.

If the query is about a user connecting to a remote controlled pc (via terminal service), and using http, https or FTP, then  the identity and policy that will be used, is whatever applies to the credential, and policy that applies to the remotely controlled pc.

I hope this answers your query.

Regards,

Eric

[dfiling]

Edadios thanks for the response. I was reading over this document (see attached), and it looks to me like the connection would be tracked via a cookie surrogate. My bigger concern is that we are looking to be able to track usage per user even though they are on a terminal server. Our current solution (Barracuda) is not able to perform this function. I am hoping to have a S160 on site this week to do some testing but was hoping to gather some intel in the forums prior to implementation.

The response helps clear up what protocols are in use but I am still wondering how terminal server connections are handled by the WSA and if they are truly handled and tracked per user instead of by the device they are connecing to.

[edadios]

If you are configured for authentication, and as long as it is not ip surrogate, and the timeout is reasonable, then you will have authentication prompt, for when the user opens a browser, and tries to browse a site. The credential they will use then, will be what is recoreded on the WSA.

I hope this answers your query.

Regards

Eric