Enable encryption from Server Manager to remote Server

[khris2fer74]

Hello. I've been connecting to some of our servers remotely through the listening port from The Server Manager directly to the VPN Server.... I looked at the session information and it said the encryption was disabled.. I just happened to notice that. When the VPN client is connected the session information always shows the encryption that it's currently using. Does anyone know how to enable the encryption when using the Server Manager when connecting directly to a server over the internet to manage? I can't find an option to do this and I thought out of the box that connection would be encrypted. Just for insight this is when I'm going to. Manage Virtual HUB .... Manage Sessions.... it shows my current session... Session Information... on Encryption it shows "Disabled (No Encryption) Thanks

[solo]

Just for insight this is when I'm going to. Manage Virtual HUB .... Manage Sessions.... it shows my current session...

No, it shows a session unrelated to SE Manager. That said, port 443 must be used for encrypted management sessions.

[khris2fer74]

Thank you for the response... I did a little bit of research and in the documentation it says the connection between server manager and server are automatically encrypted, and it doesn't specify that you have to use a certain port # on the last sentence What do you think?

2.4.1 What is VPN Server Manager

SoftEther VPN Server Manager is an administration utility that supports Windows graphic user interface (GUI) for administering SoftEther VPN Server or SoftEther VPN Bridge by local or remote computer. Using VPN Server Manager enables you to connect to and administer SoftEther VPN Server or SoftEther VPN Bridge without learning complicated commands or operation methods. You can also administer SoftEther VPN Server / SoftEther VPN Bridge operating on a UNIX operating system from a familiar Windows terminal.

Using VPN Server Manager is extremely convenient because it lets you connect to VPN Server / VPN Bridge in a remote location via the Internet. The host name or IP address of the connection destination VPN Server / VPN Bridge when connecting and the listener port number by which the servers are operating are specified as "1".If server administration is conducted through a network, all communication contents are automatically encrypted by SSL to ensure security.

[solo]

2.4.1 What is VPN Server Manager - ADDENDUM

Port 443 must be used for encrypted management sessions.

[khris2fer74]

I just ran a wireshark capture pointing to the IP address that I'm managing over the internet......the moment I logged in using port 5329 this came up

85 7.118346326 TLSv1.2 147 Application Data

The connection is encrypted.

[khris2fer74]

I mean if you needed to use a different port because 443 was already used... you should be able to ... I don't see Softether designing something that would allow an unencrypted connection attempt into the server it would be a huge security flaw

[solo]

Here is my PacketiX.NET Server Manager on port 443:
.

443.png

.
Here is my PacketiX.NET Server Manager on port 992:
.

992.png

.

[khris2fer74]

Interesting. I've tested on 2 servers using port 5329 and those 2 are showing encrypted connection so far. I'm going to keep researching. The service you're using is that done over the web or is it a installed app? Thank You

[solo]

The captured packets were generated by "vpnsmgr.exe" v4.44.

Submit your concerns to the devs at https://github.com/SoftEtherVPN/SoftEtherVPN/issues