University network blocks OpenVPN on iOS

[Pwbkkee 0]

Hello!

 

My university's network prevents my iOS device from connecting to AirVPN, regardless of port, protocol, or server choice. Using resolved hosts in the OpenVPN configuration files does not work either.

 

They seem to be using Check Point Software Technologies Ltd (http://www.checkpoint.com/) software and firewalls, judging from the block page shown when I try to access the AirVPN website from the university network. Which Check Point product or solution my university is using, I do not know, but it seems to be using a form of SSL inspection (http://www.checkpoint.com/products/application-control-software-blade/).

 

Any ideas or suggestions on how to bypass this block, as there's no SSH or SSL tunneling available for iOS?

 

(On a side note, will the portable version of Eddie work from a USB drive on a non-administrator Windows 7 PC?)

[go558a83nk 364]

Hello!

 

My university's network prevents my iOS device from connecting to AirVPN, regardless of port, protocol, or server choice. Using resolved hosts in the OpenVPN configuration files does not work either.

 

They seem to be using Check Point Software Technologies Ltd (http://www.checkpoint.com/) software and firewalls, judging from the block page shown when I try to access the AirVPN website from the university network. Which Check Point product or solution my university is using, I do not know, but it seems to be using a form of SSL inspection (http://www.checkpoint.com/products/application-control-software-blade/).

 

Any ideas or suggestions on how to bypass this block, as there's no SSH or SSL tunneling available for iOS?

 

(On a side note, will the portable version of Eddie work from a USB drive on a non-administrator Windows 7 PC?)

 

jailbreak your iOS device and install stunnel.

[Pwbkkee 0]

I like my iOS sandboxes just fine, thanks  .

 

Is there any way to obfuscate OpenVPN traffic, apart from SSH and SSL tunneling which is unavailable on iOS, like how Tor does it with Pluggable Transports? But without resorting to rooting iOS.

[zhang888 1066]

Not really. Another option would be carrying a small pocket size router, like TP-Link MR series or a Raspberry Pi,

and use it as your router, or another Android device that can act as an OpenVPN client and a hotspot.

[zhang888 1066]

Use your Mac to connect using a ssh tunnel, then share your wifi network from your Mac and use your ios device to connect to your Mac's starred wifi http://www.macworld.co.uk/how-to/mac/how-share-wi-fi-connection-mac-iphone-3490420/.

 

OP didn't ask about a Mac, not sure he even has one.

On a side note, downloading the config and trying different ports might work even without obfuscation.

URL filtering and Application Control will block access to airvpn.org, but are not DPI solutions.

[mehāniskākaravīrs935 24]

SSH/SSL Tunneling is absolutely impossible on a non jailbroken iPhone. Your best bet is to carry your laptop with you and connect via eddie on SSH/SSL and then use a program such as connectify to share that connection as a wireless hotspot. I have done it myself and it works absolutely fine. Considering you are a university student you should either have a laptop or think about getting one, they are handy at universitys for much more than just VPN's.

 

Happy VPN'ing

[dagadog 5]

As a former Checkpoint firewall admin, I'd say if they don't want you to use VPN through their network, you probably can't. They also probably told you they don't want you to use VPN when you signed up for their WiFi.