topic Re: resetting HTTP/HTTPS connections made prior to VPNRA connection in SASE and Remote Access

resetting HTTP/HTTPS connections made prior to VPNRA connection

npaulo — Mon, 15 Mar 2021 15:04:31 GMT

Hello mates,

I have a RA VPN in R80.30 gateways and realised something I would like to avoid. If I have the pac file configured on my laptop I can connect to the internet even if I don´t connect my RA VPN to the company. At some point I connect the VPN and the web connections still flow throught my home connection for some minutes even the new ones I start on the browser. I have split tunnel disabled on Global Settings so all traffic must pass on the gateways.

Is there any way to force this web connections to stop immediatly and send all connections throught the gateway as soon as I connect the RA VPN?

Thank you.

Nuno

Re: resetting HTTP/HTTPS connections made prior to VPNRA connection

PhoneBoy — Tue, 16 Mar 2021 21:22:31 GMT

The browser typically evaluates the proxy.pac file on startup.
I believe you can reload this on the browser side but that’s not something we can affect.

That said, I believe we do terminate existing TCP connections when you connect to the VPN
How did you confirm the connections are going out…unencrypted from the Endpoint and not through the VPN client?

Re: resetting HTTP/HTTPS connections made prior to VPNRA connection

npaulo — Wed, 17 Mar 2021 12:08:16 GMT

Hello,

I can see this connections are going through my local connection with a netstat -a. I believe didn´t saw this behaviour eveer before, could it be a bug? Running JHF take 227 on top of R80.30.

thank you.