Results 1 to 6 of 6
  1. #1
    Newbie
    Join Date
    Dec 2020
    Posts
    3

    Default I think we got robbed...

    As us home users, we all purchased a VPN that has no Dynamic IP support, that does not protect traffic to anything except local traffic by default, and cannot be used on devices that are on the same network.
    We also have a Virus scanner that cannot scan SSL traffic even though 90+% of current day to day internet traffic is SSL.

    What happened here? Where did this go wrong?
    Last edited by Dragaxx; 12-04-2020 at 10:48 AM.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,687

    Default

    It's not dynamic IP but hostname support needed in WG. This is coming in 16.3. https://jira.untangle.com/browse/NGFW-13305

    As with any SSL traffic, if you need to implement SSL Inspector to allow apps to scan SSL traffic. This is an issue with any firewall.

    I don't see how you were robbed if you could trial it for free before buying.
    Last edited by jcoffin; 12-04-2020 at 01:51 PM.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Newbie
    Join Date
    Dec 2020
    Posts
    3

    Default

    Quote Originally Posted by jcoffin View Post
    It's not dynamic IP but hostname support needed in WG. This is coming in 16.3. https://jira.untangle.com/browse/NGFW-13305

    As with any SSL traffic, if you need to implement SSL Inspector to allow apps to scan SSL traffic. This is an issue with any firewall.

    I don't see how you were robbed if you could trial it for free before buying.
    Yes we need Dynamic DNS support because we have Dynamic IP's. Should have been a priority because its useless now for the home user that have ISP's that change their IP often.

    SSL inspector is on and the Certs are installed. There is no option in the Virus scanner for SSL scanning. Tested with EICAR test file and it only blocks http.

    I have been a Business client since 2005 (This is the home account) so I have seen all kinds of rollouts, but this one seems to be lacking what the Home clients are needing. I would think that since this was added mainly for the home users, that it would actually help from the start and not be missing the key components that we use to protect our networks. It seems like it is a Beta Rollout for us to test.

    As for the trail. Like I previously stated I have been a client long enough to know when we get security tools added they work, and to generally Trust Untangle to leave on auto updates for future releases. There was no reason to Doubt that the WireGuard VPN worked like any other VPN does nor was there any documentation stating that it does not work now but in the future. Same goes with the Virus scanner that was included. It didnt state that there is no https scanning option and that Viruses can still come across https traffic even with SSL inspection turned on.


    utg1.png
    utg2.png
    utg3.png

  4. #4
    Newbie
    Join Date
    Dec 2020
    Posts
    3

    Default

    And yes I am aware that I can enable and move the rule "Scanning All Traffic" and put it before "Ignore Other Traffic" but it breaks allot of the websites out there. You have to constantly adding ignores.

  5. #5
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Lake Tahoe
    Posts
    9,687

    Default

    Quote Originally Posted by Dragaxx View Post
    Yes we need Dynamic DNS support because we have Dynamic IP's. Should have been a priority because its useless now for the home user that have ISP's that change their IP often.
    You are not understanding. Dynamic DNS is already in NGFW. It has been for a long time. https://wiki.untangle.com/index.php/..._Configuration

    If you modify the client config before importing it to the PC with hostname, it will connect.
    ncksh and CMcNaughton like this.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  6. #6
    Untangler
    Join Date
    Feb 2019
    Posts
    33

    Default

    Quote Originally Posted by Dragaxx View Post
    As us home users, we all purchased a VPN that has no Dynamic IP support, that does not protect traffic to anything except local traffic by default, and cannot be used on devices that are on the same network.
    We also have a Virus scanner that cannot scan SSL traffic even though 90+% of current day to day internet traffic is SSL.

    What happened here? Where did this go wrong?
    I'm confused by what your saying, you don't really need Dynamic IP support just change the file on the client device? For mobile phones you just change the settings in the app, Only protects local traffic by default what do you mean by this?
    Last edited by pcwatermods; 12-16-2020 at 02:23 PM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2