Windows 10: RDP slow internally when deny access to internet. But fast when we allow traffic to the...

The condition is as following:If we have DENY any any on outgoing traffic to WAN from all mashines, our RDP is very slow connecting. It is hanging at "securing remote connection" for around a minutes or so, and then it connects.If we have Allow any any on outgoing traffic to WAN from all mashines, out RDP is back to normal and instantly connect and ask for password.Why is this? We of course do not want internet access at all, but if needed we can allow specific ports for specific locations on WAN.PS. It is a fully on premise setup

:)

 

Windows Firewall: Allow internal network / deny internet access

Hi all,
Been lurking here for years, but I finally need some direct help please.
I have a need to allow a specific program to have internal network access, but disallow/deny that same program all internet access. I don't see any way to do this in the firewall settings. It seems like it's an all or nothing toggle. What am I missing?
I'm using Malwarebytes Windows Firewall Control, which is just a fancy GUI for the built-in windows firewall.

windows ver: 1909

- - - Updated - - -

Really, almost 2600 views and not a single suggestion? Is this really such an impossible problem? *Huh
If so, is there another firewall program (free or paid) that would allow me to do this?
I have a security camera system that needs internal access to my network, but the software I use is notorious for pushing out automatic updates that break the system. I can't have that, so the suggestion is to block access to the internet for that program. However, I can't block internet and still allow internal network traffic with the Windows Firewall. Not that I can find anyway.

 

Guidance needed to setup my Home PC access over Internet through browser

I wasn't giving steps on how to get RDP working, that is covered plenty of other places, I just give the steps to make it secure.

RDP. If they aren't tracking your Web browsing, I doubt they are going to track RDP.

And if you start the session from the command prompt it doesn't even put the address in the MRU list.

Though the question that needs to be asked now is, what are you using for your VM lab?

 

How to allow all internet traffic through a specified NIC?

Hello,

I am looking for a way to direct all internet traffic through a specific NIC, here is the scenario:

> I am running a VPN client on a Windows computer. When the user logs in, the VPN client automatically connects (rather, the tunnel is established without the user authenticating), and the user is unable to disconnect the VPN, (e.g. Cloudflare WARP, with switch mode off). The VPN split-tunneling is set to off, so all traffic goes through the VPN adapter/tunnel. <

The VPN is used for secure browsing and remote access.

This works fine because when a user logs into the computer and starts to use it for internet browsing, I can track all traffic to the device and I can content filter the traffic also via the VPN server side. Here is the twist, I would like to force the user to authenticate the VPN when they log into the Windows desktop, that way, they authenticate before accessing the resources or browsing the internet. That I can do (allow them to authenticate before accessing the remote resources), but the challenge is can't block them from using the internet without first authenticating the VPN and establishing the tunnel.

Which, leads me to my question, is there a way I can set internet access via a specific NIC? That way I can set internet traffic to flow via the VPN connection,

1. But if I block the internet on all other NICs, how will the VPN client itself establish the tunnel?
   
2. I was playing around with Windows firewall but was not getting what I wanted.
   
3. If I can allow access only to the port that the VPN client needs, and block all other traffic until the tunnel is established
   

Thanks for your help in advance