Remote Desktop Services: does all network traffic go through the gateway at all times?

Question

Just checking to see if I have one gateway server, 5 host servers and 30 users, and all users are using a Microsoft Access application, is all the screen sharing traffic going through the gateway?

Answer 1

Hi,

By default the traffic may or not use the gateway, depending on if the client PC is able to directly connect or not. For example, PCs that are in the office and connected to same network as the RDS server would not use RD Gateway while external PCs connecting via the Internet would use the RD Gateway.

You may configure things in such a way to force all traffic to go through the RD Gateway if you want.

-TP

Answer 2

It could be interesting to understand how to set RD Gateway to enforce all traffi to be tunneled by default (never try direct access to Service Broker/RDS servers).

It seem, if a remote or local client is able to see to Service Broker/RDS servers, it will not try to use the HTTPS (tcp/443), but it will fallback to RDP protocol directly (tcp/3389).

We would ensure the RD Gateway is always the onliest method:

Client <-- tcp/443 --> RD Gateway <-- tcp/3389 --> Service Broker / RDS