topic Re: Vpn in Thailand and Asia in General Topics

Vpn in Thailand and Asia

Elena89 — Thu, 09 Sep 2021 12:37:20 GMT

Is there anybody working from Thailand using Global Protect vpn?
I heard that the country can block vpn connection. While my company's configurations allow me working from Thai.

I'm planning to relocate and want to make sure i can work from there.

Would be grateful for any information, maybe you heard anything from somebody concerning Thailand or nearest countries. Or which difficulties you faced..

Thank you in advance

Re: Vpn in Thailand and Asia

S.Cantwell — Fri, 10 Sep 2021 00:00:07 GMT

I was reading and there are some well known VPN proxy clients/apps that could be restricted, but I have not heard of GP being denied. We have users in APAC without issue.

Re: Vpn in Thailand and Asia

aleksandar.astardzhiev — Fri, 10 Sep 2021 07:23:09 GMT

The easiest way to block VPN clients is to block IPsec. I while a go was working for customer that had one user travaled to China and had issues connecting to their VPN. We concluded that China was filtering the IPsec completely.

Even that I known I may be wrong, but it is hard for me to imagine there is a way to filter GlobalProtect running in SSL mode. Without SSL decryption (which I don't believe they can achive) GP over SSL will mix with the rest of the web browsing traffic and cannot be identified easily.

GlobalProtect will automatically fallback to SSL when it cannot connect over IPsec.

In addition it is easy to detect and block commercial VPNs, even with SSL, because the hostname (and IP address) you are connectiong are in most cases well known and categorized.

My guess is that you should not have any issues with GlobalProtect:

- when running over SSL it is hard to identify as VPN traffic

- as it is not commercial product, it shouldn't be categorized as VPN by filtering systems