Can network monitoring see where our VPN users connect from?

Partly. A sensor that sees the VPN gateway's traffic knows the public address each tunnel comes from, and that address can be matched to the country of the network it is registered to. That is useful but not precise: registration data shows where the network's owner is registered, not where the person sits, and travel, mobile networks, hotel Wi-Fi and commercial VPN services all blur it. The sensor also does not know which account a tunnel belongs to; the VPN gateway's own logs do. The NetSenX VPN view lists the VPN tunnels and gateway sessions it sees on monitored segments, with the country taken from network registration data, and flags addresses on lists of commercial VPN services and Tor exits. Use it beside the gateway's sign-in logs: the logs say who, the network view says from which network and what happened next.

← All 40 questions on Remote work and exposed servicesAll topics