windows terminal services server ssl vs tls

Your device can then correctly identify each user and apply the correct security policies to the traffic for each user, based on user or group names.įor more information about how to enable your Firebox to authenticate users over port 4100, see Configure Your Firebox as an Authentication Server and About the WatchGuard Authentication (WG-Auth) Policy. The Terminal Services Agent monitors traffic generated by individual users (traffic owners) and reports the user session ID to the device for each traffic flow generated by a Terminal Server or Citrix server client. The Terminal Services Agent is also known as the TO (Traffic Owner) Agent. Enable Terminal Services settings in your Firebox configuration file.Īfter you complete these configuration settings, when each Terminal Server or Citrix server user authenticates to your Firebox, the device sends the Terminal Services Agent (TO Agent) a user session ID for each user who logs in.Configure your Firebox to authenticate users to the authentication portal over port 4100.Install the WatchGuard Terminal Services Agent on your Terminal Server (2012 or later) or Citrix server.įor operating system compatibility, see the Release Notes for the version of Fireware on your Firebox.To make sure that your users are correctly identified, you must:

If your device runs Fireware v11.0–v11.3.x, terminal services support is not available and the configuration settings do not appear. There is no way for the Firebox to distinguish which of the several users who are concurrently logged on to your Terminal Server or Citrix server generated any particular traffic. Then, when another user sends traffic from the Terminal Server or Citrix server IP address, it appears to the Firebox that this traffic also came from the first user that authenticated. This is because when one user authenticates to the Firebox, the device maps that user to the IP address of the Terminal Server or Citrix server. When you have more than one user who connects to your Terminal Server or Citrix server and then connects to your network or the Internet, it can be difficult to control the individual traffic flows from these users based on their user names or group memberships. Install and Configure the Terminal Services Agent

Windows terminal services server ssl vs tls