Global Protect client - Block inbound traffic - Internet Adapter

ChristerJohanssonR — Mon, 24 Sep 2018 10:45:04 GMT

Hi,

The scenarios is as follows:
a) I have a Windows10-client with Global Protect (GP) version 4.1.4 installed

b) The Win10 has inbound RDP (tcp-3389) enabled so that the support can access the client remotely

c) The GP is configured with "Always On" so that it connect to our company network as soon as it finds an ISP-connection

The problem:
a) While the GP-client is connected to our company network, it is still accepting incoming RDP-connections on the INTERNET-adapter

The question:
Is it possible to "block" inbound RDP-connections from INTERNET while the GP-client is active or do I have to do that with either Windows own firewall or a third party firewall software?

Re: Global Protect client - Block inbound traffic - Internet Adapter

BPry — Mon, 24 Sep 2018 14:59:15 GMT

@ChristerJohanssonR,

Within Windows firewall you need to limit the rule to just a subset of source IPs. So essentially the only thing that is allowed RDP access is going to come from your internal IPs, not public sources.

topic Re: Global Protect client - Block inbound traffic - Internet Adapter in General Topics

Global Protect client - Block inbound traffic - Internet Adapter

Re: Global Protect client - Block inbound traffic - Internet Adapter