cyberark univeristy网关目标了解用途v8x gateway04 psmrd.pptx

CyberArkUniveristyPSMRDGateway

ObjectivesUnderstandthePurposeoftheRDGateway.UnderstandhowtoprepareforanddeploytheRDGateway.

PurposeoftheRDGatewayUsingtheRDgatewayallowsyoutoprovidePSMservicestoexternalusersoverHTTPS.EliminatestheneedtoopenRDPportstoanoutsideorVPNnetwork.

PrerequisitesInstall,Configure,andVerifyaWorkingPSMserverontheinternalnetwork.InstallandConfigureaPVWAintheDMZnetwork.InstallanSSLcertificateandconfigureHTTPSbindings.Ensureyourexternalvendor’sclientmachineswilltrustthecertificate.Configurefirewallrulestoallowcommunication.

InstallingtheGatewayEnableRemoteDesktopontheGatewayServer.

InstallingtheGatewayCreatealocalgroupcalled“RDGatewayAllowedUsers”CreatealocalusercalledRDGConnect.AddRDGConnecttothe“RDGatewayAllowedUsers”and“RemoteDesktopUsers”groups.

InstallingtheGatewayCreateadomaingroupcalled“RDGatewayComputers”AddtheRDGatewaymachinescomputeraccountasamember.

InstallingtheGatewayAddtheRDGConnectusertothePSMSafe

InstallingtheGatewayInstalltheRDGatewayRoleontheRDGatewayServer.IncludeonlytheRemoteDesktopGatewayRoleService.

InstallingtheGatewaySelectonlytheNetworkPolicyServerroleservice.

InstallingtheGatewayKeepthedefaultsontheIISServerRoleServices.

InstallingtheGatewayClickInstallandFinishthewizard

ConfiguringtheGatewayInRDGatewayManagercreateanewConnectionAuthorizationPolicy.

ConfiguringtheGatewaySetthePolicyName.

ConfiguringtheGatewayOntheRequirementstab,makesureonlyPasswordauthenticationischecked

ConfiguringtheGatewayUnderUserGroupMembershipaddthe“RDGatewayAllowedUsers”group.

ConfiguringtheGatewayInRDGatewayManagercreateanewResourceAuthorizationPolicy

ConfiguringtheGatewayOntheGroupstabaddtheBuiltin\Usersgroup.

ConfiguringtheGatewayOntheNetworkResourceTabaddthe“RDGatewayComputers”Domain