SRX Services Gateway
Showing results for 
Search instead for 
Do you mean 
Reply
Highlighted
Contributor
Posts: 15
Registered: ‎10-29-2014
0 Kudos

RDP sessions randomly drop with SESSION protection

Hi,

 

We are using SRX3400 at the datacenter with SCREEN enabled. We have enabled almost all SCREEN options and we are experiencing drops on tcp sessions randomly.

 

When it comes to RDP it becomes much more frustrating. In terms of your experience, can you provide me your best practices with SCREEN protection ? What should we do to both enable SCREEN protection and solve session drop problems ?

 

Thanks

Recognized Expert
Posts: 199
Registered: ‎04-03-2015
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

Hi,

 

I would suggest using "alarm without drop" option for the screens in order to determine the correct threshold for the various screens :-

https://www.juniper.net/documentation/en_US/junos12.1x46/topics/reference/configuration-statement/se...

 

The thresholds are different for every network and there is no guide on what the ideal levels are as they will be different for different environments.

 

You will be able to figure out the ideal values for your network using trial and error. The alarm without drop option would send you syslogs without actually dropping the traffic and thus will be helpful for zeroing in on the correct value.

 

Hope this helps !

 

Regards,

Sahil Sharma
---------------------------------------------------
Please mark my solution as accepted if it helped, Kudos are appreciated as well.

Contributor
Posts: 15
Registered: ‎10-29-2014
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

Hi Sahil,

 

Thank you for the tip. I will definitely check that out.

 

Besides than that do you have any other suggestions, like this one, about screen for me as a best practice maybe ?

 

Thanks

Contributor
Posts: 15
Registered: ‎10-29-2014
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

Hi Sahil,

 

It turns out that, that feature is not supported on SRX3400 unfortunately.

 

Do you have any other suggestions ?

Distinguished Expert
Posts: 1,048
Registered: ‎08-29-2013
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

Are you saying RDP connections blocked by SCREEN ? Or how did you confirm its the screen config thats creating issue and nothing else? The reason if if screen is creating performance issues I expect you to see issues with all traffic.

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too
Contributor
Posts: 15
Registered: ‎10-29-2014
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

I am not trying to say that SCREEN is dropping RDP connections, I dont have a clue for that. What I am trying to say is; RDP sessions drop randomly and can SCREEN be the cause or should I look for something else for this ?

 

Let me revise the situation;

 

I have 2 uplinks from same router. Lets say uplink A and uplink B

Uplink A is connected to a Windows Server 1 directly

Uplink A -> Windows Server 1

Uplink B is connected to Juniper SRX3400 and then connected to Windows Server 2

Uplink B -> Juniper SRX3400 (With SCREEN enabled) -> Windows Server 2

 

I can stay connected to server through Uplink A without any problems, but when I connect to Windows Server with Uplink B RDP sessions drop randomly.

 

Hope this revision helps to clarify the problem.

Super Contributor
Posts: 160
Registered: ‎04-08-2015
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

Does this only happen to RDP or are other Services that need to pass the SRX impacted?

Could it be that your SRX drops rdp because of a "timeout"?

Out of the Box this happens when there is no "input" for 30mins (default).

 

You can check the timeout of your session with this Article:

https://kb.juniper.net/InfoCenter/index?page=content&id=KB21344&smlogin=true&actp=search

 

We often get calls by Customers, that their SRX is doing this - mostly because the timeout-value has not been increased.

You can set the timeout-value per Application:

https://kb.juniper.net/InfoCenter/index?page=content&id=KB28630&actp=search

 

Regards
Chris
Twitter: @chsjuniper
Distinguished Expert
Posts: 1,048
Registered: ‎08-29-2013
0 Kudos

Re: RDP sessions randomly drop with SESSION protection

This makes it clear. I really dont think screen can cause this behavior. Is it the same source and destination you are using to test via 2 ISP? If not can you check the behavior with same source and destination ?

Thanks,
Suraj
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too