End-of-Life (EoL)
On a system that support multiple users who share the same IP address, a Terminal Services (TS) agent identifies individual users by allocating port ranges to each one. The TS agent notifies every connected firewall about the allocated port range so that the firewalls can enforce policy based on users and user groups. You can perform the following tasks to manage access to TS agents.
You must install and configure the TS agents before configuring access to them. The complete procedure to configure user mapping for terminal server users requires additional tasks.
Task Description
Display information / Refresh Connected In the Terminal Services Agents page, the Connected column displays the status of the connections from the firewall to the TS agents. A green icon indicates a successful connection, a yellow icon indicates a disabled connection, and a red icon indicates a failed connection. If you think the connection status might have changed since you first opened the page, click Refresh Connected to update the status display.
Add To configure access to a TS agent, click Add and complete the following fields: Name —Enter a name to identify the TS agent (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, spaces, hyphens, and underscores. Host —Enter the IP address of the terminal server where the TS agent is installed. This must be a static IP address; DHCP is not supported. Port —Enter the port number (default is 5009) that the TS agent service will use to communicate with the firewall. Alternative IP Addresses —If the terminal server where the TS agent is installed has multiple IP addresses that can appear as the source IP address for the outgoing traffic, click Add and enter up to eight additional IP addresses. These must be static IP addresses; DHCP is not supported. Enabled —Select this option to enable the firewall to communicate with this TS agent.
Delete To remove the configuration that enables access to a TS agent, select the agent and click Delete. To disable access to a TS agent without deleting its configuration, edit the agent and clear Enabled.

Recommended For You