A user was experiencing issues with downloading files on VPN through the new Management feature. They noticed in the network log that the system was attempting to upload the requested file to Azure before downloading it. The user shared their findings in the ticket and was asked to provide details on their VPN type. They also brought up the need for specific IPs or more granular access for the firewall team. Another user mentioned they were curious if the same issue would occur with their company’s new VPN. The original user suggested it was more likely a firewall policy issue than a VPN issue. A request was made for the user to provide unfiltered Wireshark logs for troubleshooting.
Read the entire ‘Troubleshooting Issues with Downloading Files on ControlUp VPN’ thread below:
Hi everyone, I already have a ticket open, but I am posting here as well to cast a wider net.
When I am on VPN, I cannot download any files with the new Management feature that was just introduced. This is not a rights issue because I can download them successfully as soon as I disconnect from the VPN. I am looking at the network log using F12, and it is failing with the following URL:
I am no expert at analyzing this data, but based on what I am seeing, does the system first upload a requested file to Azure before I download it? I ask because the computer I am downloading from is in a data center managed by our company and is not located in Azure.
Hi Artur did you share in the ticket i would suggest not sharing the full URL here as might contain data specific to your tenant
It’s just an icon file I am trying to download.
That said, let me edit my post and also update my ticket with my findings.
In your ticket u also said you resolved the issue, can u include in the ticket what you did on the VPN side. I had talk with the Dev team and VPN should not have affected the functionality
Resolved meaning it works off of VPN. So now I need to make it work on VPN, which means I need to know what to ask our firewall team to open.
i’ll go back to the development team
Out of boredom, I decided to do this F12 test and discovered how it’s going to Azure Blob storge to download a file that resides somewhere else.
can u share also in the ticket details of the type of VPN that you use
- GlobalProtect by Palo Alto
Sure enough, after disconnecting from the VPN, I was able to navigate to https://agentblobeastus.blob.core.windows.net/. After connecting back, I received the typical "This site can’t be reached" message.
I am not sure I should ask the firewall team to open that entire URL. I will wait to hear back if ControlUp has specific IPs they use or something more granular than just asking for blanket access to the domain.
leave it with me
Do you have general steps for how you’re testing? We are currently migrating our company VPN to GlobalProtect by PA and am curious if this is blocked for us as well
My logic is that this is not a matter of which VPN client is being used. Instead, it is about the specific firewall policies that are implemented once that connection is established.
Yes we are migrating with typically all traffic blacklisted besides common known applications. Havent fully tested the new management feature on any systems migrated to GP VPN so was curious on the testing procedure to determine that disconnecting GP allowed navigation to the blob URL
Artur would it be possible to get wireshark logs from VPN on and Off?
and send them into the ticket
Yes. I haven’t used Wireshark in a bit, but shouldn’t be too complicated.
just unfiltered collection,
Continue reading and comment on the thread ‘Troubleshooting Issues with Downloading Files on ControlUp VPN’. Not a member? Join Here!
Categories: All Archives, ControlUp for Desktops