Google Remote Desktop blocked on Fortigate 100F when connecting from outside the LAN

[kpatio]

Hello, there is a problem with Google Remote Desktop on the back of a Fortigate 100F. Enable the filtered applications and permit Google Play and Google Remote Desktop. Inside the LAN, you can connect to the devices without any problem. Sin embargo, the problem arises when you try to connect the LAN network, for example, from my home. At the extreme end, because the connection is stable, but when the computer initiates the connection, it will get a connection error after a while.

Because this is blocked from using Google Remote Desktop when you try to connect to the LAN, you can access an external device or vice-versa. He says that it may be necessary to enable some UDP entry ports, but I am concerned about safety risks.

Do you have any idea of ​​how to solve this problem? 

[Atul_S]

Can you enter a screenshot of the policy that allows this connection so that you can check which UTM profiles apply in this case?

[kpatio]

Here the capture

[Atul_S]

Hi There,

Thanks for providing the screenshots. The policy and the application profile seems okay. I can propose two recommendations:

1. Allow STUN to the policy allowing the chrome remote access. Refer the link https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-enable-STUN-protocol-in-policy/ta-p... for more info.

OR

2. Best option would be is to allow RDP access and not Chrome if you are concerned about STUN. Refer https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-RDP-via-VIP/ta-p/210093 for more info.

Thanks,