VPN Clientless RDP - Guacamole freeRDP Webconnect or other

[NorthernNetGuy]

With the surge of getting people to work from home, we're trying to get a strong solution in place.

I've quickly set up a freeRDP Webconnect service available through our sslvpn web portal. I'm finding it to be a bit unstable and requiring about 1-2 reboots a day.

I'm wondering if Guacamole or another app might be something that suits as, and wanted to see what others are using.

Our basic requirement is to have users be able to use the portal just like a regular RDP session. Enter in the host name and their credentials (SSO might be fine), and connect.  I'm unsure if I can get this kind of flexibility in Guacamole, as it looks like I have to define each host manually. Not sure what other RDS items I should be considering.

[PhoneBoy]

You might want to see what @Shay_Levin used in his video: https://community.checkpoint.com/t5/How-To-Videos/Mobile-Access-Blade-RDP-access-Step-by-Step/m-p/78...

[NorthernNetGuy]

I actually followed that video for setting up the same application, the freeRDP Webconnect, however i've foudn that utility to be unstable, needing to restart the services multiple times a day, which ahs lead me to where I am now, looking for a better alternative

[Shay_Levin]

Hi,

Guacamole is mature, stable and free but requires an investment in learning.

If you want a product with support that works great and can be published easily with MAB - Web application,  try  https://www.ericom.com/access-now/html5-rdp-client/    (but isn't free )

[NorthernNetGuy]

Hi Shay, first of all the step by step video you have is excellent. I'll take a look at this utility you've suggested

[StefanBauer]

Hello,

we also want to use the mobile access blade for the "Guacamole" access. Unfortunately does Guacamole (version 1.1) work internal fine. From external with the mobile access we can logon, but we cannot open settings and sessions.

Do you have any idea what the reason is?

We have Check Point version R.80.30 running.

Thanks in advance.

Stefan

[PhoneBoy]

As with any "reverse proxy" of this nature, there's a fair bit of link/Javascript rewriting going on.
Looks like some changes may be required on our end to support Guacamole.
Refer to: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[StefanBauer]

Current we use as link translation "path translation" (PT). Has anyone experience with "hostname translation"?
It might be the better solution. I take that from the "Mobile Access Administration Guide".

We also tried:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

It doesn' t really change something...