Terminal Service Plus

Hi.

I have upgraded to the latest version and installed the RDP Defender tool, great addition!

At the end of the installation process, I got a message advising to add the remote administrator workstation IP to the White List, which made sense, so I wouldn't, accidentally, be added to the Block List and never have remote access to the TSPlus server anymore. At this stage, I got a bit confused by the message, since my TSPlus server is not in my local network, but in the cloud. So, the message kind of implies that we should add our local workstation IP to the White List, but being remote, shouldn't it be my remote network external IP, from where my workstation is installed in, that I should enter? Then, I added my external IP, since the local IP from my workstation could be the same from another user in another network, who I wouldn't like to give access to.

After all this, I went to the TSPlus admin application and accessed the Session Manager, which shows my user logged in and its Client Address, and for my surprise, the client address is my local workstation IP number. This made me think, will RDP Defender work with this local IP number too in the case of White List and Blocked IPs? If so, this could bring many issues to the case.

Sorry if I made myself confusing. So, what IP number should I enter into the White List and what IP number will be Blocked in case of attacks?

Thanks in advance.

Ivan

Hello,

Your analysis is perfectly right.

The "Client Address" is indeed the local IP, this is used by some of our customers to check the connected workstations inside their own private network. This is not really interesting when your users connect from another network.

Regarding RDP Defender white list, you want to add your external (public) IP address, as RDP Defender wants mainly to block external IPs.
So yes, good thinking

Hey!

Thank you for the attention.

One thing I noticed. If I access my remote TSPlus server through Remote Desktop application, the Session Manager shows the Client Address as my workstation local IP address. On the other hand, if I connect to the server using the HTML5 Web access, once logged on, the Client Address shows as my network external IP number. Interesting...

IvanGB wrote:If I access my remote TSPlus server through Remote Desktop application, the Session Manager shows the Client Address as my workstation local IP address.
On the other hand, if I connect to the server using the HTML5 Web access, once logged on, the Client Address shows as my network external IP number.

Hi Ivan,

Here the exact same behavior with our vps (with Windows 2012 R2) in the cloud with TSplus.
When using mstsc.exe, Session Manager shows my local IP address.
So is RDP Defender only meant/suitable for HTML5 connections?!

Best regards
Jeffrey

Hello jkuijt,

Session Manager and RDP Defender are two different tools.
They are not related at all.

RDP Defender will work for any RDP connection on your RDP port.

Hello
when I install RDP defender, I can add my current external IP as exclusion IP (if I understand correctly) but my IP change daily - that means I can not access my VPS any more?
How to solve that, please?