WebVPN connectivity to Windows Server 2012 R2?

mcvosi · ‎11-05-2015

My ASA's webVPN functionality worked fine with the RDP plug-in, connecting to 2003 and 2008 Windows servers. Connectivity to a new 2012 R2 server does not seem to be working. Has anyone had any luck in doing this? I'm trying to avoid installing the AnyConnect client as the user's computer is not in my management scope.

BTW, ASA version is 9.2.4.

Thx

Dinesh Moudgil · ‎11-06-2015

Hi mcvosi,

Couple of things to check for isolating the issue.
1. Is RDP working for Windows 2003 + Windows 2008 and just not working for Windows 2012 R2 server or was it working for the former servers and now not working for any of them.
2. Was the ASA upgraded recently?
3. What is the Java version.
4. What is the error that the clients are getting.

As a test , try using the latest RDP plugin and let me know how it fares.

Regards,
Dinesh Moudgil

Please rate helpful posts.

Cisco Network Security Channel - https://www.youtube.com/c/CiscoNetSec/

mcvosi · ‎11-06-2015

1. Yes, works fine for 2003 and 2008, but not 2012.

2. Prior code was 9.1.6(?) and now am running 9.2.4. Same result.

3. JRE version is 7.

4. Basically the SSL VPN home screen just refreshes and does nothing.

I think it has to do with the JRE version, because I tried using the ActiveX plug-in and that seemed to work.

Dinesh Moudgil · ‎11-07-2015

Hi mcvosi,

I have checked further and found the enhancement for supporting 2012 server with RDP plugin.

https://tools.cisco.com/bugsearch/bug/CSCuh27112/?reffering_site=dumpcr

You can use the workaround mentioned in the enhancement details.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.

Cisco Network Security Channel - https://www.youtube.com/c/CiscoNetSec/

onslaught99 · ‎05-04-2016

Hello mcvosi,

Not sure if this is still an issue for you or not but what worked for us connecting to our Windows Server 2012 using the RDP client was to use Internet Explorer as I have researched that Java does not jive well with 2012 OS. We used IE 11 since IE uses ActiveX which works with the 2012 OS and on the 2012 server itself you have to uncheck the NLA compatible box under remote settings. To do that just log into the 2012 server and right click on the Windows or Start button on the lower left and choose system. Click on Remote Settings and under the Remote tab, uncheck the bottom box stating to only allow connections for computers running Remote Desktop with NLA. Also you will need to upload the rdp plugin and not the rdp2 plugin for the 2012 server. Hope that helps!!