About ssimartim

ssimartim · ‎07-08-2020

I tested it and it worked. Thanks!

ssimartim · ‎06-26-2020

You can block it with a external firewall that uses regions/countries in the rules. But as @flipPipe said, a vm could be created in a cloud provider of your region and the connection won't be blocked.

ssimartim · ‎06-26-2020

Hello, My company is splitting in two (IT staff/resources won't change) so the connection url VPN must be adapted to something like this: vpn.company1.com vpn.company2.com I've read about configuring a virtual port to support the new hostname/certificate: https://docs.pulsesecure.net/WebHelp/Content/PCS/PCS_AdminGuide_8.2/Using%20Device%20Certificates.htm I could something like this: * external physical port -> associated with certificate vpn.company1.com * new external virtual port -> associated with certificate vpn.company2.com The trouble here is I need to purchase a new public IP and that's $$$. It's is possible to use a certificate with the two domains? For example, a certificate with: CN=vpn.company1.com Subject Alternative Name: DNS Name=vpn.company2.com And then associate this certificate to the external phisycal port. Thanks! :)

ssimartim · ‎04-27-2020

Hi Ray, I made the tcpdump and observed the following message in RDP negotiation: RDP negotiation failure: server requires enhanced RDP security with CredSSP. Then I checked the bookmark section and realized that the checkbox "Network Level Authentication" was unmarked. I marked it and then it started to work. Thank you very much, the topic can be closed.

ssimartim · ‎04-14-2020

Hi, I don't see any events related to ACL. I get this from a trace: Start Policy [HOSTPORT/WINTERMSERV] evaluation for resource workstation.local:3389 Applying Policy [RP_WTS_My_PC]... Action [Allow access] is returned Policy [RP_WTS_My_PC] applies to resource In the user access log, I see that the connection is created: Connected to workstation.local port 3389 Closed connection to workstation.local port 3389 after 0 seconds, with 19 bytes read (in 1 chunks) and 47 bytes written (in 1 chunks) Login succeeded for User-test (session:5cdf523e) from a.b.c.d with Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.92 Safari/537.36 Edg/81.0.416.53. Primary authentication successful for User-test from a.b.c.d I definitely have no idea why this happens.

ssimartim · ‎04-13-2020

Hello team, I've configured dynamic terminal services bookmarks as described in KB28693 but I'm not able to make it works. When the user logins the bookmark is created, but there is always error launching it: "An internal state error has occurred. The remote session will be disconnected. Your local computer might be low on memory. Close some programs, and then try connecting to the remote computer again." I'm using ldap attribute "otherIpPhone" as in KB28693... But now, if I change the ldap attribute to "ipPhone" or "facsimileTelephoneNumber", the bookmark works and the terminal session is launched... Also, I tried a html5 boookmark using "otherIpPhone" attribute and it also worked. So, the problem couldn't be the ldap attribute. What am I doing wrong? Could be a bug? (I'm running version 9.1R4). Thanks.

Re: Multiple url connection domain

Re: Block connections from outside the US?

Multiple url connection domain

Re: Dynamic terminal services bookmark.

Re: Dynamic terminal services bookmark.

Dynamic terminal services bookmark.