This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IP has changed

When connected via VPN, why do some sites display an error message about the IP address changed and wont let me login to do anything?

The most recent example is with Solarwinds Mail Assure. Some times it lets me in for a min or two other times I go straight to page with this error.

Another one is GoDaddy's cPanel.

Here is a copy of one of the error messages:

Your IP or Internet browser has changed since you've started the current session. As such your access has been automatically denied for security reasons. Please check with your system administrator about this.

I don't have any issues with the same site if Im off VPN.

This thread was automatically locked due to age.

0 Fabien Martinet over 7 years ago

Hi,

is your VPN configured to be used as your gateway once connected ?
Cancel
Vote Up 0 Vote Down

Cancel
0 ViciousMagician1116 over 7 years ago in reply to Fabien Martinet

Yes it is. Without it you don't get dns from internal to access anything by name.
Cancel
Vote Up 0 Vote Down

Cancel
0 Fabien Martinet over 7 years ago in reply to ViciousMagician1116

You can have the internal dns (internal ip) and it can resolve fqdn for outside sites, you can access them directly.

But anyway, your question is about the "ip change" when using vpn as a gateway. Is your vpn site using different wan connections ?
Cancel
Vote Up 0 Vote Down

Cancel
0 ViciousMagician1116 over 7 years ago in reply to Fabien Martinet

I do have 2 IP's on the XG assigned to 2 interfaces in the WAN Zone. However if I don't have the 2nd one many of the firewall rules quit working.

Interested to know how to get internal DNS without setting it as default gateway.
Cancel
Vote Up 0 Vote Down

Cancel
0 Fabien Martinet over 7 years ago in reply to ViciousMagician1116

In your rules on which gateway do you use ? Wan Link load balance (both of your links depending your load-balancing rule) or a specific one ?

If load-balancing, what is your politic (Network/Wan Link Manager) ?

For the dns, "show VPN Settings" and then IPv4 DNS (primary/secondary). Your rules the dick††† n**************† to allow access of course.

Edit 2018-02-22

not relevant here, my mistake : Depending of your internal DNS (Microsoft or Bind) you can also use split-dns to send differents results based on ip of the requester : https://en.wikipedia.org/wiki/Split-horizon_DNS

/Edit

BRgds
Cancel
Vote Up 0 Vote Down

Cancel
0 ViciousMagician1116 over 7 years ago in reply to Fabien Martinet

I think i got the wan link all figured out finally. I still have both running but all rules seem to use the default now. I have the 2nd on there so that userportal will operate on 443 along with everything else thats on 443.

Im testing out removing default gateway but my computer is still using it as default but I think thats a metric issue with the wifi and vpn interfaces. If nothing else we will have to just give up using the userportal on 443
Cancel
Vote Up 0 Vote Down

Cancel