topic Re: VPN - Remoted PC is routed normally but remoted mobile is not in SASE and Remote Access

VPN - Remoted PC is routed normally but remoted mobile is not

kathanh257 — Fri, 29 Aug 2025 15:35:44 GMT

I checkout that last week till now, remote access from mobile cannot ping to some important subnet. Before that time it's working normal.
I try to ping our dns server from remoted mobile and result is disconnect. But it is connected if I try from remoted PC.

one more thing, remoted phone only ping 8.8.8.8.

Could anyone tell me what wrong with this case? Thanks in advance.

Re: VPN - Remoted PC is routed normally but remoted mobile is not

PhoneBoy — Tue, 02 Sep 2025 23:37:50 GMT

A lot more details are needed, for example:

What version/JHF is the gateway.
What version of VPN clients on what OS and version
Anything that shows in the logs that might explain it "not working"

Re: VPN - Remoted PC is routed normally but remoted mobile is not

the_rock — Tue, 02 Sep 2025 23:40:35 GMT

I agree with Phoneboy that way more details are needed here. Versions/jumbo to start with, then, did you do any captures, ie tcpdump or fw monitor? Any relevant drops, logs?

Andy

Re: VPN - Remoted PC is routed normally but remoted mobile is not

kathanh257 — Wed, 03 Sep 2025 10:14:33 GMT

What version/JHF is the gateway.
- R81.10 Jumbo Hotfix Take 156
What version of VPN clients on what OS and version
- Client: iphone or androi
- VPN Client: Capsule 1.600.138
Anything that shows in the logs that might explain it "not working"
- I have checked the incoming traffic log (from remoted mobile) and see that only traffic from mobile to 8.8.8.8, others traffic is not captured.

Re: VPN - Remoted PC is routed normally but remoted mobile is not

PhoneBoy — Wed, 03 Sep 2025 15:52:34 GMT

You said "it is connected if I try from remoted PC" but mentioned nothing about what OS or VPN client version/type was used for said test.
Have you done any packet captures from the gateway to confirm the VPN client is even sending traffic to the gateway?
If not, I'd start there as it should give us an idea of where to start looking.
That and reviewing the client logs, which you can generate from the app.

Re: VPN - Remoted PC is routed normally but remoted mobile is not

kathanh257 — Thu, 04 Sep 2025 10:23:37 GMT

I checked some config as below:

A) GW Config:

1) GW properties -> VPN Clients -> Remote Access -> Office Mode
+ Enable Office Mode & Allow Office Mode for all users
+ Manual( using IP pool) CP_default_Office
2) GW properties -> VPN Clients -> Remote Access -> Remote Access
+ Allow VPN clients to access the Internet through this Security Gateway

B) Mobile side:

1) Mobile received Office Mode IP? -> Yes
2) Check Capsule VPN Type: IPsec

As config as above, I try some test and the results I realize is:

when PC connect VPN, it's routed through CPGW but mobile is not (even if I allow VPN clients to access the Internet through my Gateway).
the mobile still routed through 4G after it's connected with VPN + received Office Mode IP

Re: VPN - Remoted PC is routed normally but remoted mobile is not

kathanh257 — Mon, 08 Sep 2025 06:38:35 GMT

As I answered above, the mobile received VPN IP normally but it's not routing through the gateway, even if I upgrade the version R81.10 standalone to R82. Could you give me any idea to fix this?