RDG - Required remote computer configuration

The Remote Desktop Gateway service (RDG) has the following requirements: 

  • Any system that will be accessed with the Remote Desktop Protocol (RDP) through the RDG servers must be configured to allow incoming connections to port 3389 from the RDG servers

The RDG servers are located on four subnets listed below.

  • 10.157.34.192/27 - No longer in use
  • 10.157.58.64/29
  • 10.157.185.64/29
  • 10.157.254.224/28 - New subnet

Departments leveraging the Austin Active Directory can apply one of the following group policies to configure computers to accept RDP connections from the RDGs:

  • AUSTIN-Firewall-Allow RDP from RDG or VPN - permits connections to port 3389 on the remote computer from the RDG subnets or the ITS VPN but does not interfere with other rules for connections to port 3389
  • AUSTIN-Firewall-Allow RDP from RDG or VPN and block all others - permits connections to port 3389 on the remote computer from the RDG subnets or the ITS VPN and blocks all other connections to port 3389

Connecting to Remote Desktop resources through the RDG on local ports other than 3389 is currently permitted but not supported. Future updates to the RDG may not permit RDP connections to ports other than 3389.