RDP server config for Clientless users

[SriNarasimha005]

Hello Everyone,

We have a checkpoint firewall operating on R82 with mobile access VPN activated. It is set to 'application' mode.

In the native application -> endpoint applications, I am specifying the path for native RD (c:\windows\system32.mstsc.exe) where the mstsc application is installed on the endpoint machine and configuring the IP address in the parameter section.

When I click the link, I'm getting the login prompt to enter the creds tor Windows users. How are they able to log in to the destination server without the office mode IP address?

I'm neither using SNX to assign an IP address from office mode nor Apache guacamole server in this case.

Can someone please brief what's happening under the hood? Thank you.

[PhoneBoy]

I presume we are using some variant of the techniques that already exist to reverse tunnel RDP over various HTTP Reverse Proxies (which is what MAB is, effectively).

[SriNarasimha005]

Hi @PhoneBoy 

Thank you for your response. It appears to be functioning well on Windows.

Is there an equivalent solution available for MAC users without utilizing the Apache Guacamole server?