WebVPN on PIX

[kh_alex81]

Is it possible to permit users to access remote desktop via webvpn ( through explorer)

I know that I can let user access services such as telnet or ssh by enabling port forwadring on PIX

But my question is : Can i let user able to access specific server through RDB ( Remote Desktop) which give him the abilities to view desktop of Server and do any thing as he can do the same when he establish VPN connection using vpn client software

[Fernando_Meza]

Hi ..

Webvpn is a feature whihc is only available on ASA .. it is not supported on PIX platforms.

http://cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008054ed98.html

I hope it helps .. please rate it if it does !!!

[kh_alex81]

Hi,

I know that PIX doesn't support that.yes it was my mistake to mention PIX instead of ASA.

Please answer on my question if you know because the site you provided here doesn't give any answer for my question.

I will ask the question again

Can I give permission to user to access specific server through RDB ( Remote Desktop) which give him the abilities to view desktop of Server and do any thing as he can do when he establish VPN connection using vpn client software

Also Another question:-

I read that ASA doesn't support NAT / PAT.Is it mean that users behind NAT device won't be able to access webvpn?

Your help will be appreciated

Regards,

Khaled Desouky

[tim.weid]

I have tried to do this through the WEBVPN on the 3000 series with no success. The only way I got it to work was to use the SSL VPN client and filter by firewall rule behind it. I could not get the TSWEB appliation to work through the portal page at all, i believe because the portal is based on port 80 and the tsweb app redirects to 3389. The portal failed.

[kh_alex81]

Hi tim.weid,

Thanks for your reply but i have just one comment. you said " because the portal is based on port 80 and the tsweb app redirects to 3389"

But i could work with some applicaton such as telnet 23 or ssh 22 and stuff like that through enabling port forwarding on ASA.If you enable port forwarding, you will be able to access many TCP based application and i think remote desktop (RDP protocol based on TCP port 3389 as you mentioned)so why not the user can access specific server using remote desktop??