Found a huge security hole. How do we plug it?

[bhollna92000]

We are using the latest version of wingate (6.2.0 build 1121)and are using KAV and Puresight (latest versions). What we have found just today is that if clients use automatic IP address settings, (Wingate DHCP) then everything works like it should, but if clients sets a manual IP address then they have full and open access to the internet, and do not show up anywhere in Gatekeeper or its logs! even in its Client activity screen. The client is just invisible!

Needless to say, this is not acceptable. What is wrong and what can we do about it?

Brian

[ChrisH]

Do these clients gain access to the internet directly through a router - effectively bypassing WG? Or do they still have Gateway pointing to WG server?

[bhollna92000]

They still have the gateway still pointing to the WG server.

Brian

[bhollna92000]

BTW, they have to go through the WG machine, there is no physical access to the internet otherwise.

[bhollna92000]

We upgraded to build 1131 and that seems to have fixed the problem.

Brian

[ChrisH]

We upgraded to build 1131 and that seems to have fixed the problem.

Interesting - but good to know! I wonder what it was?