Hi,
Firewall rules for the path between the external network and the perimeter network (Ports that need to be opened on the external firewall):
Port TCP:443 should be opened for allowing HTTPS traffic from the client sitting on the Internet to the RD Gateway server in the perimeter network.
Firewall rules for the path between the perimeter network and the internal network (Ports that need to be opened on the internal firewall):
RD Gateway authentication traffic
Kerberos Port = TCP: 88
Server protocol RPC endpoint mapper
TCP 135 and the port where your NTDS RPC Service is listening on.
RD Gateway authorization Traffic
Default: Port = TCP/389 UDP/389
DNS Traffic
Port TCP/53, UDP 53
RDP Traffic
Port = TCP/3389
Certificate Revocation list traffic
Server protocols are LDAP OR HTTPS or FTP
for LDAP TCP/389,UDP/389 for Http = 80 for FTP 21
of RD Gaetway if configured to use a central server running NPS the following firewall rule should alse be made
Protocol Radius
Port 1812
Radius Accounting
1813
If the RD Web Access point to a connetncation broker
than TCP/5504 should be open to
