https://live.paloaltonetworks.com/t5/general-topics/microsoft-remote-desktop-service-server-with-captive-portal-on/m-p/73284#M41396 <P>Hi</P> <P>PA200 PANOS-7.03</P> <P>Working Production Config:</P> <P>I have captive portal working with local users. User are in 4 groups (1 to 4) . There are 4 url profiles(1 to 4) associated with 4 local user groups. When user tries to go to any site via browser he get prompted for username/pass. Once authenticated user can browse as per 4 secrutiy policies for brwosing with url profile implemented.</P> <P>user mapping shows user name and there ip.</P> <P>&nbsp;show user ip-user-mapping all<BR /><BR />IP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Vsys&nbsp;&nbsp; From&nbsp;&nbsp;&nbsp; User&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IdleTimeout(s) MaxTimeout(s)<BR />--------------- ------ ------- -------------------------------- -------------- -------------<BR />172.29.15.92&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 28332&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 28332&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;<BR />172.29.5.24&nbsp;&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 33428&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 33428&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;<BR />172.29.15.59&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc3 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31339&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31339&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;<BR />172.29.5.39&nbsp;&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc4 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31447&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31447</P> <P>&nbsp;</P> <P>Change Required:</P> <P>Configure Microsoft Remote Desktop Service(RDS) server so all the user connect to this RDS server and this server goes out on internet to get data.</P> <P>But now there is only 1 IP which is server IP going out. So how would captive portal,url filtering will behave/work.</P> <P>&nbsp;</P> Tue, 23 Feb 2016 00:33:11 GMT inderjit21 2016-02-23T00:33:11Z https://live.paloaltonetworks.com/t5/general-topics/microsoft-remote-desktop-service-server-with-captive-portal-on/m-p/73284#M41396 <P>Hi</P> <P>PA200 PANOS-7.03</P> <P>Working Production Config:</P> <P>I have captive portal working with local users. User are in 4 groups (1 to 4) . There are 4 url profiles(1 to 4) associated with 4 local user groups. When user tries to go to any site via browser he get prompted for username/pass. Once authenticated user can browse as per 4 secrutiy policies for brwosing with url profile implemented.</P> <P>user mapping shows user name and there ip.</P> <P>&nbsp;show user ip-user-mapping all<BR /><BR />IP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Vsys&nbsp;&nbsp; From&nbsp;&nbsp;&nbsp; User&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; IdleTimeout(s) MaxTimeout(s)<BR />--------------- ------ ------- -------------------------------- -------------- -------------<BR />172.29.15.92&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc1 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 28332&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 28332&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;<BR />172.29.5.24&nbsp;&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc2 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 33428&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 33428&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;<BR />172.29.15.59&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc3 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31339&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31339&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;<BR />172.29.5.39&nbsp;&nbsp;&nbsp;&nbsp; vsys1&nbsp; CP&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abc4 &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31447&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 31447</P> <P>&nbsp;</P> <P>Change Required:</P> <P>Configure Microsoft Remote Desktop Service(RDS) server so all the user connect to this RDS server and this server goes out on internet to get data.</P> <P>But now there is only 1 IP which is server IP going out. So how would captive portal,url filtering will behave/work.</P> <P>&nbsp;</P> Tue, 23 Feb 2016 00:33:11 GMT https://live.paloaltonetworks.com/t5/general-topics/microsoft-remote-desktop-service-server-with-captive-portal-on/m-p/73284#M41396 inderjit21 2016-02-23T00:33:11Z https://live.paloaltonetworks.com/t5/general-topics/microsoft-remote-desktop-service-server-with-captive-portal-on/m-p/73288#M41397 <P>You need to download Terminal Server Agent from support portal and install it on terminal server.</P> <P><A href="https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Install-and-Configure-Terminal-Server-Agent/ta-p/53839" target="_blank">https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Install-and-Configure-Terminal-Server-Agent/ta-p/53839</A></P> <P>&nbsp;</P> <P>In this case every user will get dedicated source port range and by that firewall can identify who is user who initiated traffic out from the server.</P> Tue, 23 Feb 2016 09:15:04 GMT https://live.paloaltonetworks.com/t5/general-topics/microsoft-remote-desktop-service-server-with-captive-portal-on/m-p/73288#M41397 Raido_Rattameister 2016-02-23T09:15:04Z