How get Client VPN Meraki work over Proxy Port 8080

[rledsti]

Hello Meraki Team

1) 2 weeks ago I managed to config the Client VPN to my Meraki Home Network - MX64 on Win10 and Android and this allowed me to connect remotely via RDP to my home Laptop (as tmv and anydesk were blocked on that site)

2) However we have moved to other site on same Company where navigation is via proxy http 8080 and Meraki VPN Client-Site Win10 config don't work with that proxy. Only after much searching over google I found vpnbook.com that at least allowed me to connect via tmv/anydesk using openvpn

3) ¿Do you know if there is a way to get Meraki VPN Client-Site to pass through that proxy? (Maybe fine-tuning some config or creating a specific 3rd Party VPN Client Profile, as vpnbook.com/openvpn on their US/EU profiles are slow sometimes and neither Meraki VPN Client-Site work through this)

Regards

[Nash]

Since it's an IPSEC VPN, the client VPN needs ports 500 and 4500 to work. 

Is it possible for your company to allow those ports for the MX? Preferentially, they'd exempt the MX's IP from the web proxy entirely.

[rledsti]

Hello Nash, thanks for your quick answer

1. Unfortunately here its very hard to get Sec Ops Admins to allow policies to be created on their FW to pass any traffic beyond their current config (I know all tweaks and OKs that are needed for that, and only remains what I can do for myself on user's side...)
2. For this I go to you as I think should be a way to tunnel Meraki VPN inside another (I'm not a Sec Specialist but if vpnbook.com could via OpenVPN pass tmv/anydesk/gdrive traffic, could not be a way to do the same with Meraki IPSec traffic?)

Regards

[Nash]

OpenVPN is an SSL VPN that by default uses port 443/https. That's an entirely separate kind of VPN with its own protocols and setup.

The Meraki client VPN is an IPSEC VPN, which means it's expecting to use 500/4500. That really can't be changed.

If you need to use the Meraki client VPN, I think you're going to have to argue with sec ops. 

[SoCalRacer]

You might try a DNS based VPN like Psiphon then use the Meraki Client VPN

https://www.psiphon3.com/en/index.html

Another option would be to Change the RDP port or port forward on your MX on an allowed port out your existing site.

Last option ditch RDP and use a remote control option that uses https like TeamViewer or LogMeIn