Device Insight – devices on VPN not showing up

StefanZ
StefanZ Posts: 202  Master Member
First Comment First Answer Friend Collector Community MVP
in Security

Devices connected to the LAN ports of my FLEX200 get listed just fine. Nifty feature.

Devices that connect via VPNs on the other hand do not get listed.

Is that the expected / wanted behaviour?

Accepted Solution

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    Answer ✓

    Hello @StefanZ
    For the client connected by VPN, Device Insight will only show the client who connected with SecuExtender.

    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    James

All Replies

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers

    Hello @StenfanZ
    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    I conduct a lab test in V5.35 and I can see it displays a client connected by IPSec VPN SecuExtender.

    device insight for SecuExtender IPse VPN client.png

  • StefanZ
    StefanZ Posts: 202  Master Member
    First Comment First Answer Friend Collector Community MVP

    Hmm I just used an IKEv2-Certificate connection (OSX native client) into the FLEX200 (FW 5.35), opened the web-admin on the client and do not see the client I am currently using in any list.

    Not in DHCP list makes sense, as it gets 10.10.10.x from the gateway.

    Not in Device Insight is still odd, isn't it?

  • StefanZ
    StefanZ Posts: 202  Master Member
    First Comment First Answer Friend Collector Community MVP

    I just noticed, that IKEv2 connections show an empty “MAC=” in the logs – because it is a virtual interface (my guess), so maybe Device Insight only logs when the device has a MAC address?

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate 100 Answers
    Answer ✓

    Hello @StefanZ
    For the client connected by VPN, Device Insight will only show the client who connected with SecuExtender.

    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    James

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）