OTG 1 for Windows Frequently Asked Questions
Browse a list of commonly asked questions and answers on WebTitan OTG 1 for Windows.
Known Issues with OTG 1 for Windows
How do I know if OTG 1 is working?
Can users manually change their DNS settings and bypass OTG 1?
How can I stop and restart OTG 1?
How can I uninstall OTG 1 from the command line?
How does OTG 1 work with a VPN?
What reports are available on roaming users?
How does OTG 1 behave with Captive Portals?
Known Issues with OTG 1 for Windows
The following is a known issue when using WebTitan OTG 1 for Windows.
Issue: A user sees a "no internet"
icon in the taskbar indicating that they have no internet connection. However, they do have internet connectivity.Solution:
Open a command prompt and run the following:
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\POLICIES\MICROSOFT\Windows\NetworkConnectivityStatusIndicator" /v UseGlobalDNS /t REG_DWORD /d 1 /fReboot machine.
How do I know if OTG 1 is working?
There are a number of ways to check if OTG 1 is working:
If the OTG icon is configured to show in the system tray, you can roll over the
icon to see its status:
Perform a command line nslookup on a domain that is known to be blocked by your policy. If the lookup returns the IP of WebTitan Cloud (which is its block page), then filtering is working.
When filtering, your network card’s IPv4 properties will have the DNS server settings changed to 127.0.0.3.
Can users manually change their DNS settings and bypass OTG 1?
Once a user has administrative privileges to their machine, they can manually change their DNS settings and bypass any filtering system.
How can I stop and restart OTG 1?
If you have admin access, you can start or stop OTG 1 in Windows Services. To do this:
Open a run box by pressing Win key + R.
Type services.msc and press Enter. The Services window displays:
Locate and click WebTitan Cloud OTG to show the Stop and Restart options. Right-mouse click for further options, e.g. Resume. Stopping this service will also stop the Unbound service.
Where are the OTG 1 logs?
Logs and post-install config files are located at:
c:\ProgramData\WebTitan Cloud OTG\
How can I uninstall OTG 1 from the command line?
Open a command prompt with administrative privileges.
Stop the OTG 1 service using this command:
net stop "WtcOtg"
Uninstall OTG 1 using the msiexec /x command, providing the exact path that OTG 1 was originally installed from, e.g.:
msiexec /x c:\temp\OTC\1.5.12\setup.msi /quiet /qn
How does OTG 1 work with a VPN?
Normally OTG 1 manages the DNS settings for all network adapters and assigns them a DNS IP of 127.0.0.3. However, OTG 1 is bypassed on VPN adapters. If OTG 1 detects a VPN adapter, it will not change its settings.
Therefore, if DNS requests are going through a VPN 1, they are unfiltered and the DNS server at the end of the VPN tunnel must be configured to apply filtering as required.
What reports are available on roaming users?
Go to Reporting > Reports where there are a number of report options available:
Select 'Requests by Users' or 'Requests by Location' from Choose Report Type.
Drill down by User for further detail or create a filter to report further by User.
See WebTitan Cloud Reporting for more information.
How does OTG 1 behave with Captive Portals?
A captive portal is a page that a user of a public-access network must view and interact with before further access is allowed. For example, when a user connects to Wi-Fi in a coffee shop and must complete a form before being granted external web access.
WebTitan OTG 1 detects this situation and backs off until the connection is made, returning the network DNS settings to their previous values.
After an external connection is made, it will take over again and change the DNS settings to point at WebTitan Cloud.
In certain situations, where firewall rules in an organization rewrite/divert all DNS traffic to a different DNS server, WebTitan OTG 1 will not provide filtering.