MachineSelector FAQ

• Why can I only access one machine at the same time?
  • If the target networks are the same or overlapping, you can only access one at the same time.
  • You don´t have permission to access more than one machine. Contact an admin to change this limit.
• The start button on a certain machine is disabled
  • You have to establish you service connection first. Check the IP address on the top banner to verify your successful connection.
  • You already have access to a machine which uses the same target network.
  • The machine license limit is reached. Ask an admin to obtain more licenses.
• I cannot find the machine
  • Maybe it´s not online. Switch to "Also offline" machines.
  • You don´t have the permission to access this machine. Contact an admin to have your permission group(s) checked.
  • The machine is not activated. An admin is able to verify the machine’s status.
  • Your display filter doesn´t match the machine you are trying to access.
  • If your system uses the controller feature: check if the machine is scheduled now for you
• The page is not updating automatically
  • Reload the page to start this again.
• After connecting to a machine the message "not in the AC list" appears. I cannot access the machine
  • An admin is able to check the allowed target networks for you. Click "Show ACL" to verify your target networks.
• Opening the machine information, a countdown is displayed next to the availability
  • A controller configured the stop time. When it´s reached you lose the connection to this machine. Unsaved labor will be lost! A controller is able to set a new countdown.
• No target network is shown in the machine tab
  • This machine is configured in OpenVPN host mode. It requires a connection first in order to obtain an IP address.
• What does the "days left" column mean?
  • It displays the remaining days the machine certificate is valid. After this period the machine will not be able to connect. Administrators have to download and install a new profile before the certificate expires!
• System is displaying that the status file is outdated
  • The service was stopped for a certain reason. A system admin has to locate the reason or has to reboot the MachineSelector.
• The error message "Could not contact gateway" appears
  • The central mGuard is not reachable. Contact a system admin.
• The error message "Your source IP address is already taken by another user!" appears
  • YYour user is configured to connect without VPN and your discovered IP address is already being used. This problem occurs if you are located behind a NAT gateway together with other users and your IP addresses have been translated. Only one user is able to establish a connection to avoid routing problems. Contact an admin so setup a VPN access for you.
• What happens to the comments after starting or stopping a connection to a machine? Is it mandatory to leave a comment?
  • It is up to the user to leave a comment. The comment will appear in the log files, the machine info page and is also shown to other users who click the “Check” button.
• Are multiple connections allowed to one machine?
  • Yes, more than one user can access one machine at the same time. Although it is recommended to click the “Check” button beforehand to insure that you will not interfere with another user.
• Am I still connected after logout?
  • No. Logout will disconnect you from the machines.
• What happens if I close the browser or shutdown the computer while being connected to a machine?
  • Your connection will stay established for 25 minutes. After this time expires the internal watchdog will disconnect you.

• How can I extend the scheduled time for a user?
  • Simply press the “Stop” button and setup a new time. Please note that the user(s) will lose the connection to the machine.
• What happens if the time runs out?
  • The user(s) will be disconnected from the machine. The machine will not be displayed to them again.
• I cannot find the machine
  • The machine is permanently set to be active. Contact an admin to change the active flag.
  • You don´t have the permission to access this machine. Contact an admin to have your permission group(s) checked.
  • Your display filter does not match to this machine. Check your filter settings.
• The machine doesn´t start immediately
  • Start and stop time is adjusted to the next full minute.
• What happens to the comments after scheduling a machine? Is it mandatory to leave a comment?
  • It is up to the controller to leave a comment. The comment will appear in the log files and is also displayed to other users who click the “Check” button.
• Is it possible to provide access to a machine to more than one user?
  • Yes, just add more users in the multiple select box. Or you add user groups which were defined by an admin before.

• I cannot delete or change an admin
  • There is a master admin flag set in the database. At least one active master admin must exist.
• What happens if the users certificate expires?
  • The user will not be able to establish the VPN connection anymore. You will have to extend the lifetime and download a new profile for the user.
• Some checkboxes are disabled in the user’s or the machine’s creation dialogue
  • It is possible that you do not own the licenses for these features. Check your licenses in the footer “Licensed for:”
• What does access control lists (ACL) mean?
  • This configures the target network(s) for the user. Each user needs at least one ACL. The network(s) are also pushed to the VPN client as remote networks.
• What´s the difference between admin and master admin?
  • The master admin cannot be changed or deleted by the other administrators. At least one active master admin must exist.
• How long are the logfiles stored?
  • They are rotating. You can also download the backup files. If you want to take logs even longer, you need to activate syslog.
• What happens to deactivated machines?
  • They are not displayed to the user(s).
• What file types can I attach to a machine?
  • All file types a browser is able to display: JPG, PDF, PNG, …
• Can I mix different target networks?
  • Yes. The MachineSelector supports equal and/or different machine networks. You may use the NAT option if machines use the same network. Enter the real network address in the NAT section and use a virtual router IP address for VPN.
• I´m not able use TCP encapsulation or pathfinder in the profile generator
  • You do not own the IPSec MG license. The internal IPSec server does not support encapsulation.
  • There is no external mGuard configured in the database.
• When creating a machine, I get an error that the target network is not listed
  • The configured network does not fit in the machine network setup in the database. You may use the NAT if you want to attach a different network.
• The network is pre-filled when creating a new machine
  • The MachineSelector suggests the next free network (without the host part). You may use this network or setup a new one.
• I cannot start the VPN profile creator
  • Check the machine certificate’s lifetime and extend it if needed.
  • You do not own a profile generator license.
• Can I access multiple networks behind a router?
  • Yes. In the profile generator click the "Add machine" button to merge another machine into this profile. You can add up to four additional machines.
• What happens when “Remote maintenance” is started?
  • The MachineSelector will be trying to establish a secure connection to Propius. Using this feature, we will be able to access the system in order to support the product.
• The machine licenses are expired. Can we still work?
  • Yes, but all machines you created after the expiration cannot be accessed by the user(s).
• How can I obtain more licenses?
  • Contact sales@propius.de