Interpreting Windows 2008: Terminal Server Gateway

Terminal Server Gateway is a service role in the Windows Server 2008 Terminal Server role that allows authorized remote users to connect to a company's internal or proprietary network from any Internet-connected device. Resources. The network resource can be a terminal server, a terminal server running a remote application, or a computer with Remote Desktop enabled.

What can TS Gateway do?

TS Gateway offers many conveniences, including:

1. TS Gateway is a resource that remote users can connect to the intranet through the Internet. By using an encrypted connection without having to configure a VPN connection;

2, TS Gateway provides a comprehensive security configuration model that allows you to control access to specific internal network resources;

3, TS Gateway provides a point-to-point RDP connection, rather than allowing remote users to access all internal resources;

4, TS Gateway enables most remote users to connect to the network through NAT (NAT) The internal network resources behind the internal network firewall, using TS Gateway, you do not need to perform additional configuration for the TS Gateway or client for this scenario.

Prior to the release of the Windows Server, security measures prevented remote users from connecting to internal network resources through firewalls or NATs. This should be port 3389, the port used for RDP connections, which is usually blocked on the firewall for security purposes. TS Gateway instead transfers RDP traffic to port 443 by using an HTTP SSL/TLP tunnel. Since most companies open port 443 to enable Intelnet connectivity, TS Gateway leverages this network design to provide remote access connectivity across multiple firewalls.

The TS Gateway Plug-in Console enables you to configure authorization policies to define the conditions that must be met for internal resources of remote user connections. For example, you can specify:

1. Who can connect to network resources (in other words, a group of users that can connect);

2. What network resources (computer groups) users can connect to ;

3. Whether the client computer must be a member of the Active Directory security group;

4. Whether to allow device and disk redirection;

5. Whether the client Need smart card authentication or password verification, or if they use other methods.

You can configure the TS Gateway server and Terminal Services client to use NAP to enhance security. NAP is a healthy policy creation, execution, and remediation technology that is included with Windows XP Service Pack 2, Windows Vista®, and Windows Server 2008. With NAP, system administrators can force health requests, including software requests and security upgrade requests. The required computer configuration, as well as other settings.

Note: Computers running Windows Server 2008 cannot be used as NAP clients when TS Gateway enforces NAP, and only computers running Windows XP SP2 and Windows VIsta can be used as NAP clients.