Limit reachable subnet for VPN clients [message #151896] |
Mon, 13 June 2022 11:14  |
tverweij
Messages: 32 Registered: March 2010 Location: Curacao
|
|
|
|
When you have tunnels between different Kerio Control instances, you can specify what subnets should be routed through this tunnel.
But for client VPN, it just routes ALL subnets that are known.
For me this is a security problem; each client can reach every machine, but it also creates problems for some clients; because it routes everything, it interferes with other VPN's.
So, I like to be able to specify custom routes for the VPN client - per VPN user. Only the specified routes should be added to th routing table of the client, limiting the attack surface and preventing problems with multiple active VPN clients on the client machines.
|
|
|
|