Simple question, do you allow the use of VPN over your guest wifi? If not, what is the reason.
I think an important question to ask is whether you are wanting to regulate/inspect traffic on the guest WiFi. If so, regardless of being a Guest WiFi or not, VPN should be blocked to ensure HTTP/HTTPS/DNS filtering/redirecting works.
I’m not letting guests bypass local dns.
I never allowed guests access to VPN or any kind of proxy. They had basic access to web and e-mail and that was it. If they needed something special, they had to clear it through me first.
Laptop → public Wi-Fi → proxy controlled by enterprise (zscaler is type solution) → vpn
Block it. Ultimately you’re responsible for what traffic comes out of that pipe. Last thing you want is people bypassing any filtering setup you have.
Hmm great point and that is something I am looking to maintain