Multiple SSL VPN's from Remote Desktop Server

[joeymartin_]

Our provincial government has switched access to their mainframes to Juniper SSL based connections with RSA Secure FOBS. I have multiple users logged into Windows 2008 R2 Remote Desktop Services who need to individually visit the site, enter their credentials and log in to create the necessary tunnel. 

It seems like only one instance of Secure Application Manager can be run on the whole server preventing users from connecting. Is this is a known issue? Workaround?

Joe

[zanyterp_]

It is a correct behavior, yes, the process that handles the connections for WSAM is a system-level process and cannot be run individually for different users.

Is WSAM required for the access your users utilize or can web-only be utilized?

[joeymartin_]

I thought this was the case based on the behavior of the application. I'm not sure about the web based access, a question from them I would imagine. thanks for the reply.

Joe

[stine_]

I think you'll also find that the terminal services client is also limited to a single user per machine.

[zanyterp_]

Yes, thank you for bringing that up as well, stine

[DanielT_]

I have the same problem: our users need to connect with WSAM from a Windows 2008 R2 Terminal Server to a 3rd party site (SA-6000). 1st user is able to open the tunnel, but 2nd one receive an error when try start WASM.

I've did some tests from from the same Win2008 against our Juniper SA-2500 and been able to connect multiple concurrent users.

The 2rd party company did the same tests on their site, connecting to their VPN, and been able to have multiple concurrent connections on the same TS too.

The issue happens only when connect from our site to 3rd party site.

I could not find any explanation for this behavior.

[zanyterp_]

Which error message is seen?

[DanielT_]

The error message is:

"The WASM is already running on this computer. Click OK to end your previous session and start a new WSAM session. (sam.windows.app.23800)."

[joeymartin_]

Same error message I am receiving. Interesting that you can run multiple instances under regular Windows 2008 though.

Joe

[zanyterp_]

I'm not sure how you are seeing it work at all on any multi-user server environment (we don't expect it will)