Detecting a vpn anonymizer in the local network and who is using it?

Options
mike4682
mike4682 Posts: 4 image  Freshman Member
First Comment Second Anniversary
in Security

I have an ATP500 firewall. There has been someone inside the network using express vpn before connecting to the internet. I can see in the App Patrol that it is being used, but I'd like to see if its an employee on the company network or a contractor using our guest wifi. Is there a way to log the ip and mac of the machine using the vpn anonymizer? I've tried activating the logs and using it from my machine, but I can't seem to find where in the logs it exists if it does exist. Thanks in advance for any help or ideas on the subject!!

Accepted Solution

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,349 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Hi @mike4682,

    Did you configure App Patrol to block the VPN software? If yes, the event log should record the client IP address that triggered App Patrol blocking.

    Zyxel Melen


All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,349 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Answer ✓

    Hi @mike4682,

    Did you configure App Patrol to block the VPN software? If yes, the event log should record the client IP address that triggered App Patrol blocking.

    Zyxel Melen


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）