Miiiithraaks Posted December 28, 2023 Share Posted December 28, 2023 Heya, not really an issue specifically but more of an observation. I work from home and noticed when I connect my work laptop to my work network using Citrix Secure Access, any traffic coming from that laptop is being categorized as gaming on the R3. More specifically its showing as Killer Instinct it appears. I mean its ok its being prioritized but the traffic is definitely not gaming and Killer Instinct isnt installed :). Wondering if thats normal for packet inspection reasons or if it should or even cloud be categorized as work from home? I am absolutely loving this router compared to the XR1000. Link to comment Share on other sites More sharing options...
DARKNESS Posted December 28, 2023 Share Posted December 28, 2023 @MiiiithraaksIt DPI based so it not perfect to add citrix is not even categorized as gaming so there must be some other traffic being detected as gaming you can check like this as it easier to understand but the more informative option would be looking at stats for nerds. Screen Recording 2023-12-27 at 9.59.00 PM.mov Link to comment Share on other sites More sharing options...
Miiiithraaks Posted December 28, 2023 Author Share Posted December 28, 2023 Dunno if you saw the update I made to the original post I had made with that info. If I web browse, rdp, or anything that uses network on the laptop while using citrix secure access it shows as Killer Instinct. All the packets coming from the device appear to be killer instinct. Link to comment Share on other sites More sharing options...
DARKNESS Posted December 28, 2023 Share Posted December 28, 2023 @MiiiithraaksI mean it a VPN from my understanding so if it is it not going to detect traffic accurately as that's dependent on unencrypted traffic for the DPI to function accurately Link to comment Share on other sites More sharing options...
Newfie Posted December 28, 2023 Share Posted December 28, 2023 It’s encrypted and the DPI engine is simply not recognising the traffic. It’s a site to site encrypted connection to make sure your information is secure via the cloud. DPI engines are known not to be 100% accurate. It’s a library that needs to know as much info as possible and with the endless list of online applications they all do the best they can. these cloud services try to secure you through their own services to protect your information, it prevents your router from knowing what info is being sent. Not quite like DoH where all traffic is encrypted so the DPI engine is simply guessing and in your case it thinks it’s a game. might be hard to characterise that service as the purpose of the service is to protect your information. By rights your laptop for work should also be on an isolated network where it’s protected too so any compromised client can’t access your laptop. That way you keep work and home use separate and more secure. Link to comment Share on other sites More sharing options...
Miiiithraaks Posted December 28, 2023 Author Share Posted December 28, 2023 Yea guys I get much of how citrix and dpi all work under the hood so I guess I wasn't asking about why it's happening so much. And I also am aware dpi is not totally accurate. I know the encrypted traffic can't be inspected and it's best guessing. Which is why I bring this up lol. I was throwing out my observation and asking if there was a way to add it to the "library" you mention. Call it a feature request I guess? But like I said, it's not really an issue so if it can't it can't. No biggie. Thanks guys! Newfie 1 Link to comment Share on other sites More sharing options...
DARKNESS Posted December 28, 2023 Share Posted December 28, 2023 @MiiiithraaksYeah I doubt that'll happen since it more of a tested feature by individuals for it to function for everyone and as stated if the traffic is encrypted the DPI can't do anything but guess the traffic.... Link to comment Share on other sites More sharing options...
Miiiithraaks Posted December 28, 2023 Author Share Posted December 28, 2023 What? Link to comment Share on other sites More sharing options...
DARKNESS Posted December 28, 2023 Share Posted December 28, 2023 @MiiiithraaksNever mind misread though it could be added I doubt it'll ever be perfect therefore it pointless do to it being encrypted as it would just cause misclassifications/more false positives on the DPI... Miiiithraaks 1 Link to comment Share on other sites More sharing options...
Newfie Posted December 28, 2023 Share Posted December 28, 2023 I guess you are asking if this secure connection can be added to the DPI list. I suppose they could try to accommodate it but the way it’s designed ie your connection with the cloud it should prevent the DPI from recognising your secure connection after all it’s suppose to insure a secure connection for security reasons. some DPI based routers simply ignore such traffic so it never shows up and is classed as uncategorised. Perhaps showing as a SSL/TLS connection might be one way too. it’s something the devs would know more about so hopefully Fraser will pop in and perhaps add it to the work load. Link to comment Share on other sites More sharing options...
Miiiithraaks Posted December 28, 2023 Author Share Posted December 28, 2023 Yea that's it exactly! Ignoring it maybe or show uncategorized or anything really is what I was thinking and asking. If even possible that is. Doesn't need to be categorized as work from home specifically or anything like that. Sorry if saying that made it confusing. Newfie 1 Link to comment Share on other sites More sharing options...
Administrators Netduma Fraser Posted December 28, 2023 Administrators Share Posted December 28, 2023 Thank you for the report, I'll have the team take a look at that and get it corrected. Miiiithraaks 1 Link to comment Share on other sites More sharing options...
Miiiithraaks Posted January 2 Author Share Posted January 2 Holy smokes it looks like this has been corrected already. Netduma Fraser 1 Link to comment Share on other sites More sharing options...
Administrators Netduma Fraser Posted January 2 Administrators Share Posted January 2 That's great to hear, they will have gone home now so I will double check this has been done! Miiiithraaks 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now