Video Screencast Help

SWG Support for Microsoft Terminal Server

Created: 14 Mar 2012 | 2 comments
artso's picture
1 Agree
3 Disagree
-2 4 Votes
Login to vote

It wuold be useful to have full support for Microsoft Terminal Server environment, with the possibility for the gateway to differentiate sessions by username and apply the corresponding policy according to the real user's group/OU.

Comments 2 CommentsJump to latest comment

TSE-JDavis's picture

How would we know whose traffic belongs to which username?

Login to vote
BenDC's picture

The limitation here is how the Terminal server present the traffic. The SWG tracks by IP then can use DCinterface or NTLM to deterimine what users are at what IP. So when using Terminal Services, Citrix, unless each user has its own unique IP SWG will be unable reliably track users/groups etc. 

Ihave even seen some customers with NATed subnets that result in the same type results because all users appear to be coming from a single IP.

If MS terminal services can utilize virtual IPs like a Citrix box then you should be okay to track those users.

Login to vote