Hello everyone,
I have configured WS2012 Server as follows :
Base-Server ( Physical Server) with WS2012 & Hyper-V
This is also my ADS/DNS and Domain Controller.
External Virtual Switch configured with IP address : 192.168.0.250. This is hosted on the Server LAN Card. The server has a single LAN Card. The DNS IP is provided by ISP. The gateway IP given to this server is 192.168.0.254 ( firewall LAN Port).
I have a cyberoam firewall with internet connection. The LAN Port IP is 192.168.0.254. The server and Firewall are connected to a passive switch. The thin Clients which connect to the RDS server are also connected to this switch.
I have configured a virtual server which is my RDS server. The Server has IP 192.168.0.244. This is connected to the virtual switch mentioned above. The Gateway given is 192.168.0.254. The DNS is 192.168.0.250 ( which is my DNS Server).
I have 40 thin clients and they are given IP addresses in the range 192.168.0.100 to 150. The Gateway for them is configured as 192.168.0.254. The DNS is the DNS server i.e. 192.168.0.250.
The Windows firewall in all servers is off.
The issue faced :
For internet access, every user should be authenticated either by firewall or ADServer. When the first user tries to access internet, he is presented with cyberoam login screen. Once authenticated, he gets internet access.
But any user who logs in after that is not asked for internet access credentials by Cyberoam firewall. He gets free access. The situation is same whether I authenticate user on the firewall or through ADS Server.
I had escalated this to Cyberoam but they asked me to talk to Microsoft as in WS2012 all TCP ports are not open by default(?). If the firewall is off, then server will accept communication on any port.
Any suggestions? Is this related to WS2012 /RDS issue?
From :
shekhar-nsk