Mapping & Redirection

[ChrisH]

Hi,

I have a client who wants to allow some of his users to remotely administer( basically telecommuting) their Windows machines. They have WG 6.0.3 and my thoughts are to either redirect or map through WG to the desired machines on their local LAN. To add a twist to this , the client wants to have another level of security before a user would be able to gain access to the remote admin log in screen. I have set up the remote control service to accept requests from external sources. We can authenticate with WG no problem. Once authenticated with WG I want to set up a policy - basically - IF authenticated allow access to LAN machine port XXXX. My questions then are; do redirects in ENS follow policies created there? or are redirects at too low of a stack level at that point? I know that I could set up mapping policy to follow the desired rule. But what are advantages/disadvantages in terms of speed, overhead etc. between each approach? TIA

[ChrisH]

OK, I had some time today and I was able to get this working with ENS redirect and policy so I answered my own question.