topic Re: OPENVPN NOT DETECTED BY APPCONTROL in General Topics

OPENVPN NOT DETECTED BY APPCONTROL

Oussama_Kadim1 — Mon, 12 Nov 2018 10:00:21 GMT

Dear all,

I tried to implement a rule to block all OpenVPN flows on security Gateway R 77.30, but it is not detected even with SSL inspection activated.

Do you have any idea, is that really working?

Best regards.

_Val_ — Mon, 12 Nov 2018 10:06:46 GMT

Make sure you are running the latest Jumbo HFA and have access to Threat Cloud. OpenVPN signature might be changed

Oussama_Kadim1 — Mon, 12 Nov 2018 16:14:25 GMT

Hello,

All is up to date, and the access to the internet is OK, but Gws still not detect Openvpn flows.

Do we need to activate SSL inspection to permit OpenVPN detection?

Regards.

PhoneBoy — Mon, 12 Nov 2018 17:53:53 GMT

Not as far as I know.

I would open a TAC case so we can gather the necessary debugging.

Also tagging Mor Himi‌ in case they've seen this.

Mor_Himi — Mon, 12 Nov 2018 19:16:00 GMT

Hi,

In general SSL inspection is not required for OpenVPN detection.

I suggest you grab a packet capture and open a support ticket with TAC.

You can ask them to contact the application research team once you have a clear use case, RB screenshots and packet captures.