Hi.
We have found 3 limitations of using the web portal to access RDP once a SSL VPN is established.
Copy and Paste of Files from the RDP Session to local computer?
Ability to use RDP over multiple Screens
Printer Redirection.
Does anyone know of settings or workarounds which allow all or any of these to work?
Nope x 3. The webportal RDP client is limited, if you want full functionality, you will need a regular RDP client with FortiClient connecting to the VPN.
In general, don’t use the web client. Its taxing on the Fortigate and purposfully limited. On the backend its just Apache Guacamole. Standup a Guacamole server and make it yourself, alot of the limitations the Fortigate has a standard Guacamole setup won’t.
But honestly RDP is so efficient that I’d just use SSL-VPN with a normal RDP session on top of it.
Definitely agree with this, web-mode RDP should be avoided if at all possible. I have seen a deployment where several users using web-mode RDP crippled a box because the conversion process of RDP to streaming HTTP is so heavily taxing on the firewall.
SSL-VPN + native RDP, or (even better) IPsec + native RDP is the go for this.