Secure Connecting Windows Server Via RDP gateway

Question

Hi,

I have lots for windows servers hosted in AWS as standalone machines.I want them to connect from on-prem in a secure way.So i have setup RDP Gateway Server to connect to RDP Session host via https.

So my setup is like this

NLB(public net)->RDP GW(Private net)->RDP Host(Private net)

So my queries are.

1.Can i install the RDP GW role in the RDP Host Servers so that i can save some cost by running one less server.?

2.Do i need to have CAL license for both RDP GW and RDP Hosts separate?

Regards,

Raj

Answer 1

Hi,

I'd be happy to help you out with your question. Sorry for the inconvenience caused.

1. It's generally not recommended to install the Remote Desktop Gateway (RD Gateway) role on the same server as the Remote Desktop Session Host (RDSH) because this configuration could potentially expose the RDSH to external threats. The RD Gateway server acts as a middleman between the remote client and the RDSH, providing an added layer of security by authenticating the user and encrypting the traffic. Installing the RD Gateway role on the RDSH server would remove this added layer of security.
2. Yes, you would need separate Client Access Licenses (CALs) for both the RD Gateway and the RDSH servers. CALs are required for each user or device that connects to the RDS environment, regardless of whether they are connecting through the RD Gateway or directly to the RDSH server. Each server that is running the RDS role must also have the appropriate number of RDS CALs installed.

If you have any other questions or need assistance with anything, please don't hesitate to let me know. I'm here to help.

If the reply was helpful, please don’t forget to upvote or accept as answer, thank you.