Device Insight – devices on VPN not showing up

Options
StefanZ
StefanZ Posts: 190  Master Member
First Anniversary 10 Comments Friend Collector First Answer

Devices connected to the LAN ports of my FLEX200 get listed just fine. Nifty feature.

Devices that connect via VPNs on the other hand do not get listed.

Is that the expected / wanted behaviour?

Accepted Solution

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hello @StefanZ
    For the client connected by VPN, Device Insight will only show the client who connected with SecuExtender.

    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    James

All Replies

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hello @StenfanZ
    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    I conduct a lab test in V5.35 and I can see it displays a client connected by IPSec VPN SecuExtender.

  • StefanZ
    StefanZ Posts: 190  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hmm I just used an IKEv2-Certificate connection (OSX native client) into the FLEX200 (FW 5.35), opened the web-admin on the client and do not see the client I am currently using in any list.

    Not in DHCP list makes sense, as it gets 10.10.10.x from the gateway.

    Not in Device Insight is still odd, isn't it?

  • StefanZ
    StefanZ Posts: 190  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    I just noticed, that IKEv2 connections show an empty “MAC=” in the logs – because it is a virtual interface (my guess), so maybe Device Insight only logs when the device has a MAC address?

  • Zyxel_James
    Zyxel_James Posts: 616  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hello @StefanZ
    For the client connected by VPN, Device Insight will only show the client who connected with SecuExtender.

    Device Insight will show the connected clients including:
    • Using wired connections.
    • Through access points (APs) using wired connections.
    • Through access points (APs) using WiFi connections.
    • Through built-in access points using WiFi connections.
    • Using SecuExtender (IPSec VPN clients).

    James

Security Highlight