This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

open vpn log

Hi Guy's,

We have setup VPN SSL on our utm SG310 and we can access the network behind the UTM with openssl vpn software.

Today I was checking the logs and we can see that since the VPNSSL is enbaled, in the logs under Network usage- Top clients by category- VPN and Tunnelling our own IP address and many other IPs like:

crawl-66-249-64-83.googlebot.com 332MB

Shouldn't we see only the IP address that have VPN connection to the utm? after all you must have user name and password and also a certificate to access the VPN

Thanks

This thread was automatically locked due to age.

0 mod2402 over 6 years ago

Hi Aresh,

which IP Pool is used for SSL VPN Clients?

crawl-66-249-64-83.googlebot.com = 66.249.64.83

Do you use a public IP Pool?

regards

mod
Cancel
Vote Up 0 Vote Down

Cancel
0 AreshAreshi over 6 years ago in reply to mod2402

Hi mod

not at all, we have setup the pool at 10.0.10.0 range

any suggestion?
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 6 years ago in reply to AreshAreshi

Hi Aresh,

can you post an example screenshot from the report and screenshots from your SSL VPN configuration?

regards

mod
Cancel
Vote Up 0 Vote Down

Cancel
0 AreshAreshi over 6 years ago in reply to mod2402

Hi mod,

Thanks for your reply,

This is what I see in the dashbord and at the same time as you see only one user is connected with openvpn ssl. also is vpn over ssl is confiured to be accessed only from one of the IP address and not from all of the available IPs.
Cancel
Vote Up 0 Vote Down

Cancel
0 mod2402 over 6 years ago in reply to AreshAreshi

Hi Aresh,

you don't use a 10.0.10.0 range as you have described it. You use the default Pool 10.242.2.0/24.

For that, the Report "Top clients by category- VPN and Tunnelling" with the external addresses has nothing to do with your SSL VPN Clients.

Regards mod
Cancel
Vote Up 0 Vote Down

Cancel
0 AreshAreshi over 6 years ago in reply to mod2402

Hi mod,

Sorry, my mistake, the 10.0.10.0 is the LAN and as you mentioned the dhcp pool is 10.242.2.0/24

when we disable the SSl VPN then we dont see the external address in the logs! question remaing is why we see them under the SSL vpn tunnelling logs?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel