I think we got robbed...

[Dragaxx]

As us home users, we all purchased a VPN that has no Dynamic IP support, that does not protect traffic to anything except local traffic by default, and cannot be used on devices that are on the same network.
We also have a Virus scanner that cannot scan SSL traffic even though 90+% of current day to day internet traffic is SSL.

What happened here? Where did this go wrong?

[jcoffin]

It's not dynamic IP but hostname support needed in WG. This is coming in 16.3. https://jira.untangle.com/browse/NGFW-13305

As with any SSL traffic, if you need to implement SSL Inspector to allow apps to scan SSL traffic. This is an issue with any firewall.

I don't see how you were robbed if you could trial it for free before buying.

[Dragaxx]

It's not dynamic IP but hostname support needed in WG. This is coming in 16.3. https://jira.untangle.com/browse/NGFW-13305

As with any SSL traffic, if you need to implement SSL Inspector to allow apps to scan SSL traffic. This is an issue with any firewall.

I don't see how you were robbed if you could trial it for free before buying.

Yes we need Dynamic DNS support because we have Dynamic IP's. Should have been a priority because its useless now for the home user that have ISP's that change their IP often.

SSL inspector is on and the Certs are installed. There is no option in the Virus scanner for SSL scanning. Tested with EICAR test file and it only blocks http.

I have been a Business client since 2005 (This is the home account) so I have seen all kinds of rollouts, but this one seems to be lacking what the Home clients are needing. I would think that since this was added mainly for the home users, that it would actually help from the start and not be missing the key components that we use to protect our networks. It seems like it is a Beta Rollout for us to test.

As for the trail. Like I previously stated I have been a client long enough to know when we get security tools added they work, and to generally Trust Untangle to leave on auto updates for future releases. There was no reason to Doubt that the WireGuard VPN worked like any other VPN does nor was there any documentation stating that it does not work now but in the future. Same goes with the Virus scanner that was included. It didnt state that there is no https scanning option and that Viruses can still come across https traffic even with SSL inspection turned on.


utg1.png
utg2.png
utg3.png

[Dragaxx]

And yes I am aware that I can enable and move the rule "Scanning All Traffic" and put it before "Ignore Other Traffic" but it breaks allot of the websites out there. You have to constantly adding ignores.

[jcoffin]

Yes we need Dynamic DNS support because we have Dynamic IP's. Should have been a priority because its useless now for the home user that have ISP's that change their IP often.

You are not understanding. Dynamic DNS is already in NGFW. It has been for a long time. https://wiki.untangle.com/index.php/..._Configuration

If you modify the client config before importing it to the PC with hostname, it will connect.

[pcwatermods]

As us home users, we all purchased a VPN that has no Dynamic IP support, that does not protect traffic to anything except local traffic by default, and cannot be used on devices that are on the same network.
We also have a Virus scanner that cannot scan SSL traffic even though 90+% of current day to day internet traffic is SSL.

What happened here? Where did this go wrong?

I'm confused by what your saying, you don't really need Dynamic IP support just change the file on the client device? For mobile phones you just change the settings in the app, Only protects local traffic by default what do you mean by this?