Remote Web Workspace, ports opened, works internally, doesn't through the firewall

Posted on 2006-04-26
Last Modified: 2012-05-05
I have searched the answers for similar problems, but it seems that some of the answers to this question get solved with permissions or rejoining PC's to the domain etc.

We have a SBS2003 server for which we are ABLE to use remote web workspace in the office.  We are able to search, find the right PC and remotely control it. From inside the office, we use the internal private IP address, http://192.168.x.x/remote.  When we try to use it from outside the firewall, we logon to the small business server using the external FQDN, find the PC, attempt to connect, then we get the message:

VBSript:  Remote Desktop Disconnected
The client could not connect to the remote computer. Remote connections might not be enabled or the computer might be too busy to accept new connections.  It is also possible that network problems are preventing your connection.  Please try connecting again later.  If the problem continues to occur, contact your administrator.  (That's me!)

I suspected ports, but these ports are ALL forwarded through the firewall currently to the private IP address of the SBS:  25, 80, 443, 3389, 4125, 1723, 500 and a couple of others.  (I'm in the process of putting an external VPN appliance in to keep from having these pinholes in the firewall.  Then I know this problem will go away because we'll be inside the network with a local private address.  But that's about 3 weeks away and I need to get this working in the meantime.)

I had also suspected that the FQDN from the outside was confusing it, so I added an internal IP address in the SBS DNS that matched the FQDN name to the local internal IP address.

I've been to several of the other answers, but I must be missing something.  Can someone help?  Thanks!!!
Question by:kennygeorge
    LVL 15

    Expert Comment

    Did you try to run ICW (Internet Connection Wizard) from Server management console.
    That a very common step overlooked.
    Run it let me know if that changed anything.
    PS. Unless you are using port 500 for some other APP, you dont need it.

    LVL 2

    Expert Comment


    I think the problem is that you need to forward port 444 to the server as well as ports 443 and 4125.



    Author Comment

    Well, it started working on its own.  We think that the ISP that controls the firewall, must have NOT completed all their programming before we first tested.  Or, a necessary reboot was not performed after the changes were completed until over the weekend.  

    At least my question outlines all the steps we took, and it works now.  

    Port 500 is for L2TP for VPN purposes.

    Thanks Ray and Chris for commenting.  The ICW was run in order to get the Exchange server working properly.  

    I'm not sure about port 444, but we're not using it.

    Thanks guys!

    LVL 2

    Expert Comment


    Yeah, I had a look at my firewall and I had forwarded port 444 as well.  I checked and this is required for access to the Intranet site using Sharepoint from outside.  Remote web workplace only requires 443 and 4125.

    It'll help if you want to allow access to your internal website from outside though!



    Accepted Solution

    PAQed with points refunded (500)

    Community Support Moderator

    Author Comment

    Thanks for the suggestions, but yes, it started working on it's own after doing what I outlined in the question.  It does work just fine now, so this is a good reference for what to do.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now