Network scans picking up PCs over VPN tunnel

billmcdonald · 2015-11-24T14:06:03.000Z

I have specific subnets configured in my scan. The network is connected to another office with a VPN tunnel. The other office has a completely different subnet. The equipment in the other office is showing up in my scan. How do I prevent that?

russellgradert8434 · 2015-11-24T15:29:18.000Z

The point of the VPN is to connect those two sites together correct?

But I may be reading this wrong. You are scanning for example 192.168.0.0/24 but getting results for 192.168.1.0/24?

What are you using to scan?

billmcdonald · 2015-11-24T15:31:42.000Z

I have the SpiceWorks network scan setup for subnets specific to Site A, yet Site B subnet devices show up.

peterb99 · 2015-11-24T15:39:57.000Z

Check the top of your Network Scan settings page. Do any of the IP ranges there correspond to devices on the other side of the VPN?

billmcdonald · 2015-11-24T15:43:41.000Z

They do not.

Site A:

10.10.1.0/24

10.10.2.0/24

10.10.3.0/24

Site B:

192.168.1.0/24

192.168.2.0/24

peterb99 · 2015-11-24T16:03:26.000Z

Did you ever have your class C subnets typed into that page? Regardless, I’d like to get a look at your log files to see where we’re getting that from. I’ll send you an email now with some instructions.

billmcdonald · 2015-11-27T03:55:25.000Z

I don’t believe I’ve received the email you mentioned… ?

peterb99 · 2015-11-30T12:25:53.000Z

I sent it to the email address that you have associated with your Spiceworks Community account. I’ll send you another now.

peterb99 · 2015-11-30T16:49:44.000Z

Bill,

Thanks for sending your logs over! I don’t see any reference to any machines in the 192.x.x.x range in your scan settings, which is good! I also don’t see any references to any machines on that range in any of your other log files. If you have machines that are in your Inventory and are on that range, they must have been scanned in at some earlier date and time. If they are still present in your Inventory now, deleting them should remove them without the risk of them coming back. Additionally, when you delete them, you’ll have the option to exclude those IPs from being scanned in again in the future.

Let me know if that helps.

billmcdonald · 2015-12-02T21:19:59.000Z

I removed them, thank you. I tried setting up a remote collector a long time ago. Perhaps that’s where they came from. Thanks for your help.

peterb99 · 2015-12-03T14:45:10.000Z

Anytime Bill - glad I could help!