Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Windows Server 2008 R2 box running RDS and a remote system that needs to connect to it. It seems like I have two options to open it up to the world:

  1. Use the RDS Web Gateway
  2. Setup a VPN to my remote site

Does it really matter which option I choose? I assume they're both plenty secure, but will I see any noticable performance differences?

share|improve this question
add comment

1 Answer 1

up vote 6 down vote accepted

Gateway wins for me every time. If your clients are running a modern OS (read: XP SP3 or above) with NLA, you can expose dozens or hundreds of terminal servers behind a single interface with a single point of entry. This makes applying NAP much easier, along with controlling who can go where and connect to what.

A VPN is more universally accepted (I.e. works on ANY OS that has a supported RDP client) but is much more complicated to set up, and depending on your implementation, can be more difficult to control who can log on to which servers.

There is no decent RDP Gateway clients for Linux and only one for OSX (iTap). Thankfully the Windows one is very good, and RDCMan is even better.

share|improve this answer
    
We're in the same boat here. RD Gateway is the official method of connecting to our terminal servers, but we also have Cisco AnyConnect for those who absolutely must connect from tables etc. –  pauska Aug 15 '12 at 10:29
    
+1 Wow! Never knew about RDCMan. Thanks! –  Garett Jul 24 '13 at 22:26
    
@Garett it's not very well publicised for some reason; but it's great. I have about a hundred servers behind about a dozen gateways for different clients all accessible in one convenient interface. –  Mark Henderson Jul 24 '13 at 22:29
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.