[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

China: Internet Usage

Posted on 2008-06-25
2
Medium Priority
?
501 Views
Last Modified: 2013-11-16
Firewall: Watchguard x55e and x10e

Hi,

I believe I have heard that using Internet in China restricts certain web sites etc. However, would a mobile user have any issues with VPN'ing into a network in Canada from China?

That is, the user would like to be able to go to any internet cafe and use his/her own laptop to VPN from China to Canada to perform administrator tasks, if needed.

BTW, I believe I will also need a european converter for my laptop AC power adapter and Blackberry.

Thanks in advance.
0
Comment
Question by:TechInNeedmm
2 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 2000 total points
ID: 21868331
As long as the traffic flows over the VPN tunnel then there would be no problem; the way VPN can be implemented is:
1. zero-route tunnel or default route tunnel
2. split tunnel

In split tunnel let's say the subnet behind Watchguard is 192.168.1.0/24; and the user is logging in from internet cafe, only the traffic from his laptop destined for 192.168.1.0/24 would flow over the VPN tunnel rest all traffic would continue to go to the internet through the cafe network.

In zero-route or default route tunnel, all the traffic would first come to the WG device and then from there on to the internet. This way there would no restriction but the user would experience a lot of latency as the traffic would be encrypted and on internet for long.

On WG all you need to do is check the box:
All traffic uses tunnel (0.0.0.0/0 IP subnet) under Firebox Users->Username->MUVPN tab.

Please let know if you need more details.

thank you.
0
 

Author Comment

by:TechInNeedmm
ID: 22280810
This worked np.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question