 | 1 | initial version |
I seem to have two streams there, one is from 10.203.205.210 to pmdvportal and looks like RDP traffic and probably isn't off interest.
The other is a TLS connection from pmdvportal to 10.203.205.210 which is accepted, the TLS handshake completes, application data is exchanged and then the client (pmdvportal) closes the connection with a RST. No real evidence of a firewall although as the capture seems to have been taken at the 10.203.205.210 side there might be an intervening proxy that sent the RST.
Repeat the capture on pmdvportal and if it is sending the RST, then it's an application issue. If it's not, then you have an intervening device.
