VPN cant access internet whilst connected to VPN

G

Guest

When connected to my works VPN I cant access the internet. This causes issues
when looking at email with hyperlinks etc. What settings do I need to change
so that I can access internet through my own broadband connection whilst
connected to VPN.
 
B

Brian Cryer

Steve said:
When connected to my works VPN I cant access the internet. This causes
issues
when looking at email with hyperlinks etc. What settings do I need to
change
so that I can access internet through my own broadband connection whilst
connected to VPN.

Could be wrong, but it sounds like you have the "Use default gateway on
remote network" checked, which basically means when you try to connect to
any external site it will route the request across the vpn connection.

1. Open the properties page for your vpn connection.
2. On the networking tab, select "Internet Protocol (TCP/IP)" and click
[Properties].
3. Click [Advanced]
4. Uncheck "Use default gateway on remote network"

Hope that cures it.

Brian.

www.cryer.co.uk/brian
 
G

Guest

Great fixed it thanks

Brian Cryer said:
Steve said:
When connected to my works VPN I cant access the internet. This causes
issues
when looking at email with hyperlinks etc. What settings do I need to
change
so that I can access internet through my own broadband connection whilst
connected to VPN.

Could be wrong, but it sounds like you have the "Use default gateway on
remote network" checked, which basically means when you try to connect to
any external site it will route the request across the vpn connection.

1. Open the properties page for your vpn connection.
2. On the networking tab, select "Internet Protocol (TCP/IP)" and click
[Properties].
3. Click [Advanced]
4. Uncheck "Use default gateway on remote network"

Hope that cures it.

Brian.

www.cryer.co.uk/brian
 
L

Leythos

brianc@ said:
Steve said:
When connected to my works VPN I cant access the internet. This causes
issues
when looking at email with hyperlinks etc. What settings do I need to
change
so that I can access internet through my own broadband connection whilst
connected to VPN.

Could be wrong, but it sounds like you have the "Use default gateway on
remote network" checked, which basically means when you try to connect to
any external site it will route the request across the vpn connection.

1. Open the properties page for your vpn connection.
2. On the networking tab, select "Internet Protocol (TCP/IP)" and click
[Properties].
3. Click [Advanced]
4. Uncheck "Use default gateway on remote network"

That can cause problems with accessing systems other than the VPN end-
point at the office.

Additionally, browsing the Internet without proper security, while VPN'd
into the office is the quickest way to have the office network
compromised.

The proper method should be to ask the Firewall people at your office to
allow outbound HTTP access for VPN users.
 
B

Brian Cryer

Leythos said:
brianc@ said:
Steve said:
When connected to my works VPN I cant access the internet. This causes
issues
when looking at email with hyperlinks etc. What settings do I need to
change
so that I can access internet through my own broadband connection
whilst
connected to VPN.

Could be wrong, but it sounds like you have the "Use default gateway on
remote network" checked, which basically means when you try to connect to
any external site it will route the request across the vpn connection.

1. Open the properties page for your vpn connection.
2. On the networking tab, select "Internet Protocol (TCP/IP)" and
click
[Properties].
3. Click [Advanced]
4. Uncheck "Use default gateway on remote network"

That can cause problems with accessing systems other than the VPN end-
point at the office.

Additionally, browsing the Internet without proper security, while VPN'd
into the office is the quickest way to have the office network
compromised.

The proper method should be to ask the Firewall people at your office to
allow outbound HTTP access for VPN users.

All valid points, but performance wise browsing across a vpn sucks because
you are introducing extra latency if not also reducing your bandwidth.

It is important to ensure that there is a decent firewall (+ anti-virus) at
the pc end - but if its connected to the internet then there *ought* to be
(something for Steve to check).

Brian.

www.cryer.co.uk/brian
 
L

Leythos

brianc@ said:
Leythos said:
brianc@ said:
When connected to my works VPN I cant access the internet. This causes
issues
when looking at email with hyperlinks etc. What settings do I need to
change
so that I can access internet through my own broadband connection
whilst
connected to VPN.

Could be wrong, but it sounds like you have the "Use default gateway on
remote network" checked, which basically means when you try to connect to
any external site it will route the request across the vpn connection.

1. Open the properties page for your vpn connection.
2. On the networking tab, select "Internet Protocol (TCP/IP)" and
click
[Properties].
3. Click [Advanced]
4. Uncheck "Use default gateway on remote network"

That can cause problems with accessing systems other than the VPN end-
point at the office.

Additionally, browsing the Internet without proper security, while VPN'd
into the office is the quickest way to have the office network
compromised.

The proper method should be to ask the Firewall people at your office to
allow outbound HTTP access for VPN users.

All valid points, but performance wise browsing across a vpn sucks because
you are introducing extra latency if not also reducing your bandwidth.

But allowing access to the local home network is more of a security risk
than putting up with slow browsing. And if it's only to do work and
check links in email, chances are that it's not that much of an speed
issue anyway. I VPN from LA to Ohio all the time, browse through the
hotel connection in LA through my VPN to Ohio and then out through the
Ohio connection (which is protected).

Is your company network not with the security?
It is important to ensure that there is a decent firewall (+ anti-virus) at
the pc end - but if its connected to the internet then there *ought* to be
(something for Steve to check).

There is no such thing as a decent firewall administered by local users
- and that's even more true when they also run as local administrators.

The proper method is to not allow local network access and to browse
through the VPN where the network admins can provide a filtered/cleaned
HTTP experience so that the company network is not compromised.
 
B

Brian Cryer

Leythos said:
brianc@ said:
Leythos said:
When connected to my works VPN I cant access the internet. This
causes
issues
when looking at email with hyperlinks etc. What settings do I need
to
change
so that I can access internet through my own broadband connection
whilst
connected to VPN.

Could be wrong, but it sounds like you have the "Use default gateway
on
remote network" checked, which basically means when you try to connect
to
any external site it will route the request across the vpn connection.

1. Open the properties page for your vpn connection.
2. On the networking tab, select "Internet Protocol (TCP/IP)" and
click
[Properties].
3. Click [Advanced]
4. Uncheck "Use default gateway on remote network"

That can cause problems with accessing systems other than the VPN end-
point at the office.

Additionally, browsing the Internet without proper security, while
VPN'd
into the office is the quickest way to have the office network
compromised.

The proper method should be to ask the Firewall people at your office
to
allow outbound HTTP access for VPN users.

All valid points, but performance wise browsing across a vpn sucks
because
you are introducing extra latency if not also reducing your bandwidth.

But allowing access to the local home network is more of a security risk
than putting up with slow browsing. And if it's only to do work and
check links in email, chances are that it's not that much of an speed
issue anyway. I VPN from LA to Ohio all the time, browse through the
hotel connection in LA through my VPN to Ohio and then out through the
Ohio connection (which is protected).

Is your company network not with the security?
It is important to ensure that there is a decent firewall (+ anti-virus)
at
the pc end - but if its connected to the internet then there *ought* to
be
(something for Steve to check).

There is no such thing as a decent firewall administered by local users
- and that's even more true when they also run as local administrators.

The proper method is to not allow local network access and to browse
through the VPN where the network admins can provide a filtered/cleaned
HTTP experience so that the company network is not compromised.

Where I work I am happy to allow users VPN access provided I have checked
their laptops first to check their firewall and anti-virus arrangements (we
control anti-virus centrally). If you are very security conscious then you
can configure firewall settings for the vpn connection at the server end,
thereby reducing any risk to the network. (Something for me to do!)

I experienced (and had complaints about) a noticeable drop in performance
surfing the net when we did it across the vpn connection. (Only those with
broadband noticed a drop, those with dial up didn't seem to notice.) Latency
aside, bandwidth is logically the smaller of your local download speed and
the upload speed on the company network. We have broadband at work, so high
download but much lower upload - our upload (288kbps) is lower than most
people have as their download speed (on broadband), hence the noticeable
drop in performance. If we had a faster link at work then (other than
latency) it would unlikely to be noticeable. (I don't have figures to prove
it, but I'm sure its latency people notice more than bandwidth, but I could
be wrong.)

I accept all of your points - and I think any reader should seriously
consider them, but I'm happy for us to run as we are, allowing people local
access to the internet.

Brian.
 
L

Leythos

brianc@ said:
Where I work I am happy to allow users VPN access provided I have checked
their laptops first to check their firewall and anti-virus arrangements (we
control anti-virus centrally). If you are very security conscious then you
can configure firewall settings for the vpn connection at the server end,
thereby reducing any risk to the network. (Something for me to do!)

I experienced (and had complaints about) a noticeable drop in performance
surfing the net when we did it across the vpn connection. (Only those with
broadband noticed a drop, those with dial up didn't seem to notice.) Latency
aside, bandwidth is logically the smaller of your local download speed and
the upload speed on the company network. We have broadband at work, so high
download but much lower upload - our upload (288kbps) is lower than most
people have as their download speed (on broadband), hence the noticeable
drop in performance. If we had a faster link at work then (other than
latency) it would unlikely to be noticeable. (I don't have figures to prove
it, but I'm sure its latency people notice more than bandwidth, but I could
be wrong.)

I accept all of your points - and I think any reader should seriously
consider them, but I'm happy for us to run as we are, allowing people local
access to the internet.

We're cool, I just wanted you to be aware of the implications and I
wasn't sure that you were when I posted.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top