← Back to the RDS Proxy main page
Targets are the servers users reach through the gateway. Open RDS Proxy » Policies » Targets.
¶ Read the targets tab
- Tiles: configured targets per protocol, enabled targets, open sessions, and targets reachable through at least one active policy. A target that no active policy covers cannot be reached by anyone.
- Status: the gateway tests a TCP connection to each target after the page is displayed and shows Reachable with the measured connection time, or Unreachable. The lightning button runs the test again.
- Target & description: the alias, the protocol and, for RDP, the NLA mode.
- Host / IP: the address the gateway connects to.
- Target account: the account used on the server, and whether its password is stored.
- Policies: the policies that give access to this target.
¶ Create a target
| Field | Meaning |
|---|---|
| Alias | The name users see in the list of servers. It does not need to be the real host name. |
| Description | A description shown in the list of servers. |
| Protocol | RDP or VNC. |
| Hostname | The real host name of the server. It only needs to resolve on the appliance. |
| Address | Optional IP address. When set, the gateway connects to this address. |
| Remote port | The port of the RDP or VNC service on the server (3389 for RDP). |
| Username / Password | The account used to open the session on the server, for example user@domain. Users never see it. |
| Network Level Authentication | How the gateway authenticates to the server (RDP only), see below. |
¶ Network Level Authentication (NLA) mode
| Mode | When to use it |
|---|---|
| NLA with NTLM (default) | Works with any Windows server, including one addressed by its IP address. |
| Kerberos, then NTLM | Tries Kerberos first and falls back to NTLM when no ticket can be obtained. |
| Kerberos only | Requires the server's DNS name and a domain controller the appliance can reach. |
| No NLA (TLS only) | Only for old servers that do not support NLA. |
If users get an NLA error, see NLA authentication failed.
¶ Publish an Active Directory group of computers
Click Active Directory group to publish every computer of an AD group as a target. Users then connect with their own Active Directory credentials. See Use Active Directory with your RDS Proxy.