topic Re: We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company. in Aerohive Migrated Content

We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

paul_specht — Wed, 19 Sep 2018 21:44:51 GMT

We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

Re: We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

samantha_lynn — Wed, 19 Sep 2018 22:33:44 GMT

If you're trying to block those VPN connections, you'd want to identify what ports they are using and block their traffic on those ports. I'd recommend using your main internet facing firewall for this.

Re: We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

paul_specht — Wed, 19 Sep 2018 22:43:20 GMT

Sam,

Thank you, but I am NOT trying to block it. We sometimes have visitors who we are working with that need this access back to their companies.

They get a generic "Error 789: The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer."

They claim they can connect from their hotel no problem.

Re: We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

samantha_lynn — Thu, 20 Sep 2018 02:08:14 GMT

Thank you for clarifying. Unless you have an IP firewall set up in the User Profile to block this traffic, we wouldn't be stopping these connections. I did find this article that might be helpful- https://social.technet.microsoft.com/Forums/ie/en-US/46667a11-5a49-4549-9e18-7d07e8001c35/error-789-when-trying-to-establish-l2tp-vpn-connection?forum=w7itpronetworking

Re: We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

paul_specht — Fri, 21 Sep 2018 01:04:09 GMT

Sam,

Thank you.

Is there any where or how can I log client traffic on the Aerohives so I can see where they are going, or if the IP firewall is blocking them?

Re: We sometimes have guests on our Guest Wi-Fi and they attempt to VPN outbound to their company.

samantha_lynn — Fri, 21 Sep 2018 01:45:21 GMT

The only options we have are going to be under the Reports tab in the HiveManager, but those don't get all that granular. I would recommend a packet capture for that kind of data observation rather than a report in the HiveManager.