SWG Support for Microsoft Terminal Server
Created: 14 Mar 2012 | 2 comments
It wuold be useful to have full support for Microsoft Terminal Server environment, with the possibility for the gateway to differentiate sessions by username and apply the corresponding policy according to the real user's group/OU.
Idea Filed Under:
Comments 2 Comments • Jump to latest comment
How would we know whose traffic belongs to which username?
The limitation here is how the Terminal server present the traffic. The SWG tracks by IP then can use DCinterface or NTLM to deterimine what users are at what IP. So when using Terminal Services, Citrix, unless each user has its own unique IP SWG will be unable reliably track users/groups etc.
Ihave even seen some customers with NATed subnets that result in the same type results because all users appear to be coming from a single IP.
If MS terminal services can utilize virtual IPs like a Citrix box then you should be okay to track those users.
Would you like to reply?
Login or Register to post your comment.