Help? Remote Desktop over forticlient

[#1]

Hi, I have setup a connection to a PC in the network ... Home--> over forticlient --> Internet --> fortigate60 --> 10.0.0.x Now I want to establish a remote desktop connection to that pc.. How do I do that?

[#2]

If everything is set up properly, all you need to do is open the remote desktop client and point it to the IP address.

[#3]

You are probably having a similiar issue that I am having. Look to see if you have a gateway on your vpn connection. I dont have one when I do IPCONFIG. I am trying to use VNC over a VPN tunnel.

[isptools]

first of all: can you ping the server (the internal server-ip) ? If yes you should also be open it via RDP if no look at the default-gw on booth sides. Michael

[#5]

Unfortunatly I cant ping anything. how come? when I have a connection over the forticlient? what could I be doing wrong. My other thread with the vpn config is here: http://support.fortinet.com/forum/tm.asp?m=16644&p=1&tmode=1&smode=1

[#6]

Bear in mind there are two ways to succesfully connect a forticlient to the fortigate. One is with an IP adress of the internal subnet on the client and inbound NAT. The second (more preferred) is to define a VPN subnet, and define a IP in the client in that VPN subnet range. (no NAT in the firewall rule!!!) In the first case you can' t rdesktop to the FC, the second case you can. (if ofcourse the FW rule allows you to) Cheers, Eric

[#7]

thank you for this advice, but can you or someone else also tell me how to do this? somehow i just can' t ping anything in the network, even thou I am connected (according to forticlient and the monitor in the fortigate60) so if I can' t ping, than I am connected, but not in the network...

[#8]

Just made a comment on the other thread you' ve opened, let' s close this and go further in the other.

[#9]

Apparently, the SA has been defined but no FW rules match the tunnel and allow traffic on it.

[#10]

Yes i agree about that, apply the firewall rule enable TCP 3389 services and allow to internal network. Regards Albert Hui