Hello,
I have built a remote desktop farm in Azure (one VM with Gateway, Web Access, Connection Broker and Licensing Roles and one VM with Session Host roles installed).
I would like to further secure it by putting an Azure Application gateway (with WAF) in front of this, and redirecting all HTTPS traffic to the Gateway/Web Access VM.
First question is will this work? I've not had a lot of experience with Azure Application Gateway, although I know it can secure HTTPS traffic so in theory should work. Does the Gateway need more than HTTPS open to the internet to work though?
I have set it up and am getting two errors:-
- the /RDWeb redirect does not work through the App Gateway. I get a ERR_TOO_MANY_REDIRECTSwhen trying to access https://rds.domainname.com/rdweb
- when I try and connect to the RDGateway with a defined RDP file I get an authorisation error - even though the password is correct. I presume the Application gateway is not passing through the correct ports/protocols to allow authentication?
Finally, if Azure Application Gateway isn't able to work in this environment are there any other Azure services or best practices to follow to secure the RDWeb/Gateway?
All advice appreciated.
Cheers,
Archie