Hi,
We are using a simple RDS Setup with a gateway/web server, connection broker and sessions hosts.
The Gateway forwards request to an MFA server (RADIUS) to provide an added layer of security.
For internal and VPN users we want them to bypass the Gateway to avoid MFA.
This is working for most clients, but some clients (and this is based on location, not username/password) do not bypass the Gateway no matter what.
We have tried changing firewalls (in case of site-to-site issues), we have changed the IP-range on the client site and nothing works, the clients just won't connect directly to the connection broker. (these are mostly windows clients and we have tested with one client on two locations, works in one, not the other)
Now my first thought was something is blocked in the firewall or network wise.
But Ping has been checked OK, Port 3389 to the CB is open, DNS is ok.
The client can even RDP directly into the Session Host without issue.
But for some reason the rdweb icons do not bypass the gateway for some client sites.
What else does the client do/need in order to bypass the RD Gateway?
Please assist.
Best regards.