disconnecting rdp sessions (over udp)

Forum|Forum|10 years ago
January 28, 2016
2 replies
13597 views

Hello,

With a customer they notice a problem with rdp sessions, which are lost at random. They connect to a Windows 2012 rdp server (RDS Gateway with several servers behind it). I managed to reproduce the issue by killing an rdp session in the session table -> the screen on the Wyse terminal freezes and the connection is dropped. You have to re-establish a session.

Well, windows 2012 uses udp for improved performance (win2008 uses the connection oriented tcp).

What I am trying to find out is WHY sessions are dropped. I know udp has a 120s idle timer, but the users get disconnected while working (so not idle). Blocking udp makes the RDS GW switch to tcp as protocol, which looks to be more stable.

Does anyone has recommendations on this? E.g. logs doesn't show anything. What make that udp sessions are lost?

Thanks for help,

Ralph

p.s. I recently upgraded the FGT240d cluster from 5.2.3 to 5.2.5 but that didn't change this issue

Dave_Hall

New Member

Try debugging the flow, something similar to the following...

diag debug reset
diag debug flow filter addr <IP address>
diag debug flow filter proto 17
diag debug flow filter port <port#>
diag debug flow show console enable
diag debug flow trace start 1000
diag debug en

See KB#FD33882 for further examples.

Ralph1973Author

New Member

Thank you, the problem is that approx 500 users are connected concurrently through rdp and it happens at random sessions at random times. So actually the number of packets will be huge to debug.

However, when we have no other alternatives, this might be the only way to tshoot