CSA 6.0 And remote desktop

Answered Question
Aug 28th, 2008
User Badges:

I upgraded to CSA 6.0 agent on my PC and when I attempt to remote desktop into a server, I am not able to. I looked in the CSA logs and there is not a log message that states the action was blocked. I uninstalled CSA and I am able to RDP. Has anyone else experienced this, and is there a way around it?


There were no events in the management console as well.


Thanks in advance!

Correct Answer by matt_nels about 8 years 8 months ago

With CSA 6.0, the Network access control rule [1635], was key to this access. The application is identified as:

svhost.exe -k termsvcs


Termsvcs is your terminal services/RDP. Just add an exception to this rule allowing the connection using host addresses.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
tsteger1 Thu, 08/28/2008 - 20:31
User Badges:
  • Red, 2250 points or more

I have it installed on a Vista laptop and RDP works ok.


Did test mode not help?


Mstsc.exe also needs to be allowed to capture all keystrokes (it is by default).

cplatt01 Fri, 08/29/2008 - 04:12
User Badges:

I did run it in test mode, but did not see any events for this type of behavior. I will continue to check it out.

Correct Answer
matt_nels Tue, 09/02/2008 - 10:26
User Badges:

With CSA 6.0, the Network access control rule [1635], was key to this access. The application is identified as:

svhost.exe -k termsvcs


Termsvcs is your terminal services/RDP. Just add an exception to this rule allowing the connection using host addresses.

cplatt01 Mon, 09/08/2008 - 09:13
User Badges:

The strange thing was that it only happend when I was connected via VPN.

Actions

This Discussion