SSG20 config with Terminal Server

[Jacob]

Hello,

I just setup a Windows Terminal Server and activated the TS Gateway, TS Web Access, etc.  I am trying to figure out how to access this off site.  DO I need to create a new policy or exception in the SSG20?  If so how would I go about doing this?  Thank you for any information.  

[Moerkholt]

Hi Jacob

If you want to access the TS Web Access from the internet you have to configure firewall policies that permits that traffic.

Depending on your internet connection this is done in different ways.

If you have a internet connection with only one ip-address you wil have to use VIP.

IF you have a scope of public ip-addresses you can configure MIP or NAT dst.

Belowis a link to the official NAT Resolution Guide that expains how to configure NAT through a Juniper ScreenOS firewall.

http://kb.juniper.net/index?page=content&id=KB11909

Here is a link to Technet that explains about TS Gateway.

http://technet.microsoft.com/en-us/library/cc730673(WS.10).aspx