Support for RDP Connection Broker with multiple RDP Session hosts

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

In Microsoft Windows it is possible to deploy for fault tolerance and load balancing, one or several machines having the RDP Connection Broker role and redirecting to different RDP Session Host machines

The question arises whether this is supported or not in the different RDP access methods provided by CA PAM

Resolution

RDP Connection Broker with several RDP Session Hosts is not supported as of the writing of this document (CA PAM 4.2.3) either using the Applet or the RDP Proxy Service

This works however if using the PAM RDP Gateway. In this later case, though, care must be taken if not using autologin to log in to CA PAM, since in this case- if the security level of the target Windows target machine is set to Allow connections only from computers running Remote Desktop with Network Level Authentication- connection will fail, as already stated in the documentation (1)

Additional Information

(1) Configure the PAM Gateway for RDP (Remote Desktop Protocol)