As all users on a Windows Terminal Server (or Metaframe Server) have the same IP address, this causes a problem when trying to control access through a firewall because although the firewall can require the user to authenticate with username and password, successful authentication means that any subsequent IP connection from that user’s source IP address will be allowed through the firewall – and everybody has the same IP address on a terminal server !
I have tried session and user authentication on Checkpoint FW1 and still have this problem. Setting authentication to per connection is not practical since with http this means every object on a page requires re-authenticating with is a major pain for users.
I need a solution that is going to be very robust and high performance, e.g. not MS Proxy server ;)- so if you have any ideas ……?