# Host Isolation over VPN

**URL:** <https://discuss.elastic.co/t/host-isolation-over-vpn/299356>\
**Category:** Endpoint Security\
**Tags:** fleet, elastic-agent\
**Created:** [March 10, 2022, 4:26pm UTC](https://discuss.elastic.co/t/host-isolation-over-vpn/299356 "2022-03-10T16:26:35Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![BenB196](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/benb196/32/83401_2.png) [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Post date:** [March 10, 2022, 4:26pm UTC](https://discuss.elastic.co/t/host-isolation-over-vpn/299356/1 "2022-03-10T16:26:35Z")

</div>

Hi All,

I'm attempting to use host isolation on a device that uses a VPN to connect to Fleet. I've noticed that when I enable host isolation on the device, it completely stops responding and no longer works. I'm assuming that this is because the isolation blocks the actual VPN from working, therefore the device is no longer able to reach the Fleet server.

The issue I'm running into, is I'm not sure which "parts" of the VPN path I need to add to the `Host Isolation exceptions` for this to work.

Would anyone have happened to come across this issue, or know what needs to be added as an exception for Isolation to work over a VPN?

---

<div class="post-metadata">

**Author:** ![Yamin\_Tian](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yamin_tian/32/80373_2.png) [@Yamin\_Tian](https://discuss.elastic.co/u/Yamin_Tian)\
**Post date:** [March 10, 2022, 6:11pm UTC](https://discuss.elastic.co/t/host-isolation-over-vpn/299356/2 "2022-03-10T18:11:51Z")

</div>

Hi @BenB196 Thanks for your feedback. The v4 IP address of the VPN server needs to be added to the Host Isolation exceptions. If you don't know the IP address of the VPN server, you could find out by ping the VPN server name. Or if you are comfortable with packet capture, you can find out the VPN server IP address from pcap. Please feel free to let us know how it goes. We are here to help.

Here's the document of how to add Host Isolation exceptions: [Host isolation exceptions | Elastic Security Solution [8.1] | Elastic](https://www.elastic.co/guide/en/security/current/host-isolation-exceptions.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 7, 2022, 6:12pm UTC](https://discuss.elastic.co/t/host-isolation-over-vpn/299356/3 "2022-04-07T18:12:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.