I am guessing that my employer’s VPN servers or Duo Mobile needs to see the path from the laptop that they issued to me, all the way in to their own servers. As a security measure, they probably don’t want to be blocked anywhere in-between. If I disappear from my home gateway twenty miles from their servers and show up next in Australia with no tracable hops in-between, they know they’ve been blocked somewhere in-between and they can not be sure that it is even me at that point. My VPN might even obscure my home gateway location, meaning that It really doesn’t look like it’s me. You’ll see that some banking connections don’t like being blocked either. In these cases, I don’t mind because the interests of my bank and of my employer are aligned with my interests. And they also have their own encryption. I have never actually tried to use my own VPN to come in over my employer’s VPN servers. But I am pretty sure it wouldn’t work. If I were them, I would block that kind of activity.
1 Like