SSL VPN connection that only allows RDP for multiple users

[bberry]

Does anyone know of a way I can setup SSL VPN to allow users to remote desktop into their own individual PCs?

I am looking into a way to allow a number of normally non-remoting, mostly non-technical users remote access back to their PCs. Our normal remote users use corporate assets with virus protection and the like that the IT groups sets up with the VPN client to access the corporate network. The concern with this normally non-remoting group is that they will not have up to date anti-virus, anti-malware, anti-spyware, etc., if any, and something may make its way onto the corporate network. This would also eleminate the need of walking the users through installing the VPN client and all the support issues on their personal PCs.

We were thinking of the SSL VPN because there is no client install but it looks like there is a single common page all SSL users share, at least on our 3020 concentrator. Maybe things are different on an ASA?

thoughts ?? sugestions ??

[Todd Pula]

On the ASA platform, you can configure a feature called WebVPN user storage. Under the clientless group policy, you identify an SMB or FTP storage location on which the ASA will save encrypted cookies and user credentials to a file. This will allow users to create a personal RDP bookmark for their respective PC via the portal page. When the user authenticates, they will see any bookmarks you globally define as well as the personal bookmarks they created.