reverse proxy access to Terminal Server farm

Posted on 2011-10-11
Last Modified: 2012-05-12
How can external access to a terminal server farm be acheived via reverse proxy?  What ports are involved?
Question by:ENTPF
    1 Comment
    LVL 60

    Accepted Solution

    Typically the proxy is placed in front of the server farm. Firewall in front of the proxy to filter off the malicious or bad traffic like port scan, malformed protocol packet, dos attack like syn flood etc. the firewall will allow only remote service port to go through. The proxy can do a NAT to safe guard the non routable address of the farm and can even act as load balancer to distribute load to other farm. Importantly, the reverse proxy concept is to make sure server has the additional layer check to steer the traffic if need be. It should be inline and not passive tap. Sometimes content filter to check for data leakage are leveeage on the proxy since it aggregate the point of all server response. Can check out F5 bigip LTM and remote service desktop integration.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Too many email signature updates to deal with?

    Are you constantly visiting users’ desks making changes to email signatures? Feel like it’s taking up all of your time? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now