Illumio Community Hub

 View Only
Back to discussions
Expand all | Collapse all

Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?

  • 1.  Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?

    Posted 10-06-2022 09:48


    #Deployment
    #General


  • 2.  RE: Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?
    Best Answer

    Posted 10-06-2022 09:57

    Katherine,

     

    The best way to log VPN traffic would be to install the VEN on the endpoints utilizing the VPN. If this is not an option, you could create unmanaged workloads for all the potential IP addresses that log-on to the VPN, and the traffic would then be logged by the other devices on your network which may communicate with those unmanaged workloads.

     

    Best regards,

     

    Thomas C.

    Professional Services Consultant



  • 3.  RE: Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?

    Posted 10-06-2022 10:23

    Just a query. even though after creating un-managed workloads, if traffic needs to be logged by other devices there should be agent installed on other end devices, So ultimately there should be agent installed on one end.



  • 4.  RE: Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?

    Posted 10-06-2022 10:33

    makes sense thank you!!!, so while using IP lists this won't be correctly logged correct?



  • 5.  RE: Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?

    Posted 10-06-2022 10:37

    Katherine,

     

    The logging with an IP list from a device with a VEN on it would show the IP list and the IP address. With a VEN or an unmanaged workload you can then add labels.

     

    Best regards,

     

    Thomas C.

    Professional Services Consultant



  • 6.  RE: Do you know the best way to check logging traffic from VPNs IP lists in explorer? since the way the traffic flows is user->vpn->user-proxy->service, will Illumio still show this traffic in Explorer?

    Posted 10-06-2022 10:40

    Important: If there is a NAT somewhere (like in the proxy), you would see the NAT address as the source.



Related Content