RDP slow vía Globalprotect

[Metgatz]

Good morning, thank you very much for your support.

I have the following problem.

I have a PA-220 equipment, connected to the Internet via a 200mb symmetrical Adsl link.

Scenario:

PanOS 10.0.6

Globalprotect clients 5.2.7 ( win 10 )

PA-220 ---NAT1:1---Router/modem-adsl---dynamic public IP---fqdn DynDNS.

I have configured global protect for rdp connections, using Ipsec.

The connection is established correctly, the problem is they very slow connections via RDP.

Apply QoS, leave only one policy for RDP with only the IPS security profile.

If I open a Dnat (for security not recommended) and if I do RDP via internet pointing to the Dyndns FQDN I don't have the slowness problems.

I added both UDP and TCP for policy permission RDP.

Please your support on how to remedy this.

Thank you, best regards.

[S.Cantwell]

Hello

Please describe "slowness", as this is a subjective word.  What is slow to you?  The painting of the screen, transferring files, mouse movement, etc?

What does your VPN configuration look like?  Are you using the default Phase1and Phase2 VPN configurations?  Have you disabled PFS from the Phase2.  You are working with a PA220 (no hardware for decryption) on top of 10.x software (which can slow down the PA220) and VPN configurations that we do not know how strong the settings are.

Provide additional information, and we can continue from there. 

Thanks.

[BPry]

@Metgatz,

There's actually a lot of topics on this forum around this problem if you search for it. Do you actually just experience "slowness" or does RDP actually freeze up while you are using it? Do you have a security profile applied to the rule allowed the traffic? 

If you're running into freezing, we've found that setting the UseURCP DWORD up helps substantially with it. To do so as a test you can simply running the following on an Admin command prompt on the machine that you are remoting into:

REG ADD "HKLM\SOFTWARE\Microsoft\Terminal Server Client" /v UseURCP /t REG_DWORD /d 0 /f