Task 3: Design and Place the Terminal Services Gateway Servers

External users can connect from an unsecured location to a terminal server farm in the following ways:

  • Through a Virtual Private Network (VPN) that extends the secure zone out to the user and provides access to all corporate applications. In this case, the user is authenticated on the network when the VPN is established.

  • Connecting to TS Gateway over the RDP protocol. This provides an encrypted connection but requires that the RDP port (3389) is open in the firewall.

  • Connecting to TS Gateway over RDP that is encapsulated in HTTPs. This provides easy Network Address Translation (NAT) and firewall traversal without requiring the RDP port (3389) to be open to the Internet.

When an external ...

Get Windows Server 2008 Terminal Services now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.