Firewalling SSL VPN RDP bookmarks

[heathen1878]

So, I have successfully managed to implement RDP bookmarks within the SSL VPN web access portal but I would like to lock down the service ports for users who use the web-access portal; primarily RDP bookmarks.

So the current setup is as follows:

Web access portal configured with web mode enabled and a number of bookmarks defined.

The SSL-VPN is then configured to map a specific group of users to the web access portal.

A firewall policy is in place ssl.root with a source address of 0.0.0.0/0 and the defined group. The destination is the specific subnet where the server referenced by the RDP bookmark exist and the service is ALL.

Any guidance or pointers would be appreciated.

Dom