We use SophosSSL VPN and for Windows 10 Enterprise Direct Access Sophos are working on their SophosConnect client which looks promising but lacks some features like the ability to not have the user shutdown the client etc. It works with MFA such as Duo for example
From: AusNOG <ausnog-boun...@lists.ausnog.net> On Behalf Of Burt Mascareigne Sent: Monday, 28 September 2020 12:48 PM To: John Cenile <jcenile1...@gmail.com>; ausnog@lists.ausnog.net Subject: Re: [AusNOG] Client VPN Solutions We use SOPHOS The agent uses a generic OpenSSL client (it’s modified for SOPHOS) but you can, if you want use the standard OpenSSL one. The 2FA is something I prefer, but can trick some clients, which maybe a downer, the 2FA 6 digit get’s appended to the password. Which is great, as the password transmitted every time is unique, but people are use to be “prompted” a 2FA code. /Shrug From: AusNOG <ausnog-boun...@lists.ausnog.net<mailto:ausnog-boun...@lists.ausnog.net>> On Behalf Of John Cenile Sent: Monday, September 28, 2020 2:38 PM To: ausnog@lists.ausnog.net<mailto:ausnog@lists.ausnog.net> Subject: [AusNOG] Client VPN Solutions G'day Noggers, I was hoping to get some recommendations on VPN solutions people out there are using. Currently we're using a Cisco ASA with the AnyConnect client, however we have found it to be quite limiting in some of the things we want to do (such as built in multifactor, restricting resources to groups, and the throughput of the device itself). Our main requirements are: * Self hosted / on-premise appliance * Multifactor support (preferably Google Authenticator) * Windows, Mac, and iPhone clients I'm also looking at the Fortinet FortiClient software, but it looks very similar to AnyConnect, so I don't have high hopes for it. I'm also looking into the Business OpenVPN product. Any other suggestions / recommendations would be great. John Cenile Github<https://github.com/john30> Twitter<https://twitter.com/cenilejohn>
_______________________________________________ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog
