Community
  • About Teechan
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Re: Client VPN Issue

by Nash in Security / SD-WAN
‎02-08-2019 08:46 AM
1 Kudo
‎02-08-2019 08:46 AM
1 Kudo
@Bonifas Is the end user saving their credential? This can also cause Win10 to change the password protocol away from PAP. Since my help desk has told end users to no longer save credentials, but to enter it every time, it's reduced the incidence of this behavior.   Assuming an AD environment where all client VPN users have an AD account... It's easier on the end user if you can integrate the VPN with their AD account, either via RADIUS or the straight up AD integration. We typically use RADIUS, since not all customers are willing to get a valid certificate for their AD server.   You can also try changing the encryption level to Optional. Windows 10 does not actually support Required encryption for PAP. It will assume the encryption level is correct and then helpfully change the password protocol to one that supports required encryption. ... View more

Re: Client VPN issue

by Teechan in Security / SD-WAN
‎02-05-2019 04:58 PM
‎02-05-2019 04:58 PM
We noticed that this occurs when Windows installs updates. I confirmed by disabling auto updates and only allowed updates for a small group. Users that were updated were the only ones who reverted. ... View more

Re: Client VPN with L2TP in mid-size enterprises

by Teechan in Security / SD-WAN
‎02-05-2019 04:45 PM
2 Kudos
‎02-05-2019 04:45 PM
2 Kudos
We are currently using Meraki MXs for Client-VPN with L2TP and IPsec in our env.  I saw that someone already suggested Anyconnect, I'd absolutely agree.    The current issues we are running into as a result of Win10, are crippling.    1. https://community.meraki.com/t5/Security-SD-WAN/Client-VPN-Issue/m-p/37181/highlight/true#M9355 2. Lately, everytime we receive Windows updates the adapter settings revert back to default - Unless your users are allowed to access their adapter settings, you'll have to reconfigure the protocols in the sec tab.   You could opt to disable a restrictive GP so they can fix it themselves, or remotely fix it for the user, granted your remote software allows for UAC access, it is time consuming.     ... View more
© 2019 Meraki