Device Insight – devices on VPN not showing up

StefanZ
StefanZ Posts: 196  Master Member
Community MVP 100 Comments First Anniversary First Answer
in Security

Devices connected to the LAN ports of my FLEX200 get listed just fine. Nifty feature.

Devices that connect via VPNs on the other hand do not get listed.

Is that the expected / wanted behaviour?

Accepted Solution

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Second Anniversary 500 Comments 100 Answers Zyxel Certified Sales Associate
    Answer ✓

    Hello @StefanZ
    For the client connected by VPN, Device Insight will only show the client who connected with SecuExtender.

    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    James

All Replies

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Second Anniversary 500 Comments 100 Answers Zyxel Certified Sales Associate

    Hello @StenfanZ
    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    I conduct a lab test in V5.35 and I can see it displays a client connected by IPSec VPN SecuExtender.

    device insight for SecuExtender IPse VPN client.png

  • StefanZ
    StefanZ Posts: 196  Master Member
    Community MVP 100 Comments First Anniversary First Answer

    Hmm I just used an IKEv2-Certificate connection (OSX native client) into the FLEX200 (FW 5.35), opened the web-admin on the client and do not see the client I am currently using in any list.

    Not in DHCP list makes sense, as it gets 10.10.10.x from the gateway.

    Not in Device Insight is still odd, isn't it?

  • StefanZ
    StefanZ Posts: 196  Master Member
    Community MVP 100 Comments First Anniversary First Answer

    I just noticed, that IKEv2 connections show an empty “MAC=” in the logs – because it is a virtual interface (my guess), so maybe Device Insight only logs when the device has a MAC address?

  • Zyxel_James
    Zyxel_James Posts: 663  Zyxel Employee
    Second Anniversary 500 Comments 100 Answers Zyxel Certified Sales Associate
    Answer ✓

    Hello @StefanZ
    For the client connected by VPN, Device Insight will only show the client who connected with SecuExtender.

    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    James

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）