Re: SSL VPN

2019-06-16 Thread Stephen Cotton
If you are authenticating off radius the profile the profile then only contains the ta.key preauth key, as well as the server certs and settings. So multiple people (or:and office) can use a single profile with their unique credentials. I believe this may be succeptable to having the password

Re: SSL VPN

2019-06-15 Thread Mark Tinka
The former. Mark. On 13/Jun/19 20:25, Jasper Backer wrote: > > Just wondering, is the client export actually tied to the logged in > user, or can every user download all other VPN profiles (which > hopefully are of little use as credentials are likely unknown)? It > used to be that way, would be

Re: SSL VPN

2019-06-14 Thread Jasper Backer
Just wondering, is the client export actually tied to the logged in user, or can every user download all other VPN profiles (which hopefully are of little use as credentials are likely unknown)? It used to be that way, would be nice if it is tied to just the logged in user. Cheers, Jasper

Re: SSL VPN

2019-06-14 Thread Curtis, Bruce
On Jun 13, 2019, at 1:32 PM, Randy Bush mailto:ra...@psg.com>> wrote: OpenVPN in pfSense? yep We run tons of these around the world. i only do 0.5kg wireguard, https://www.wireguard.com/, is simpler (always a good thing with security), and has had code looked at by some credible experts.

Re: SSL VPN

2019-06-14 Thread Hansen, Christoffer
On 14/06/2019 01:11, Eric Tykwinski wrote: > This is the second time I’ve seen WireGuard this past week, and honestly > sounds really promising. > I’m probably going to test out on VyOS since I know it has support, but any > word on ASA or JunOS? If you want to take VyOS 1.2.x for a test

Re: SSL VPN

2019-06-14 Thread Mark Tinka
On 13/Jun/19 20:06, Matt Harris wrote: > > With the client config generator package, "openvpn-client-export", > installed, this is imho the best option for an end-user VPN. pfSense > has a much nicer UI than OpenVPN AS, and that UI also supports other > things you might need (like routing

Re: SSL VPN

2019-06-13 Thread santiago.martinez.uk
+1and it also support HA. Sent from my Samsung Galaxy smartphone. Original message From: Mark Tinka Date: 13/06/2019 14:59 (GMT-03:00) To: nanog@nanog.org Subject: Re: SSL VPN On 1/Jun/19 16:53, Mehmet Akcin wrote:> Hey there>> I am trying to choose SSL VPN for

Re: SSL VPN

2019-06-13 Thread Matt Harris
On Thu, Jun 13, 2019 at 6:12 PM Eric Tykwinski wrote: > This is the second time I’ve seen WireGuard this past week, and honestly > sounds really promising. > I’m probably going to test out on VyOS since I know it has support, but > any word on ASA or JunOS? > I.E. is this going to export to

Re: SSL VPN

2019-06-13 Thread Eric Tykwinski
> On Jun 13, 2019, at 2:32 PM, Randy Bush wrote: > >> OpenVPN in pfSense? > > yep > >> We run tons of these around the world. > > i only do 0.5kg > > wireguard, https://www.wireguard.com/, is simpler (always a good thing > with security), and has had code looked at by some credible

Re: SSL VPN

2019-06-13 Thread Randy Bush
> OpenVPN in pfSense? yep > We run tons of these around the world. i only do 0.5kg wireguard, https://www.wireguard.com/, is simpler (always a good thing with security), and has had code looked at by some credible experts. randy

Re: SSL VPN

2019-06-13 Thread Matt Harris
On Thu, Jun 13, 2019 at 12:59 PM Mark Tinka wrote: > > OpenVPN in pfSense? > > We run tons of these around the world. > > Mark. > > With the client config generator package, "openvpn-client-export", installed, this is imho the best option for an end-user VPN. pfSense has a much nicer UI than

Re: SSL VPN

2019-06-13 Thread Mark Tinka
On 1/Jun/19 16:53, Mehmet Akcin wrote: > Hey there > > I am trying to choose SSL VPN for a remote office 3-4 people max each > any given time. > > I have looked at Pulse and Cisco, and wanted to check in here for > recommendations on latest trends. > > Trying to get a solution easy to manage

Re: SSL VPN

2019-06-01 Thread Brielle
There is always the open source server/client ocserv. Server is compatible with pulse and Cisco clients, Ocserv client is compatible with pulse and Cisco servers as well. Sent from my iPhone > On Jun 1, 2019, at 1:10 PM, Ross Tajvar wrote: > > I've used that too. I found the admin

Re: SSL VPN

2019-06-01 Thread Ross Tajvar
I've used that too. I found the admin interface to be pretty unintuitive. And it kicks all active sessions without warning when you make a config change. On Sat, Jun 1, 2019, 2:32 PM Warren Kumari wrote: > OpenVPN AS? > > I’ve been running it for ~20 users for many years — it just works, has >

Re: SSL VPN

2019-06-01 Thread Warren Kumari
OpenVPN AS? I’ve been running it for ~20 users for many years — it just works, has clients for many OSes, etc. W On Sat, Jun 1, 2019 at 10:54 AM Mehmet Akcin wrote: > Hey there > > I am trying to choose SSL VPN for a remote office 3-4 people max each any > given time. > > I have looked at

Re: [nanog] Re: SSL VPN

2019-06-01 Thread Ross Tajvar
I've used Pulse and AnyConnect (as a user) and Windows-based SSTP (as an admin). They all worked well. The nice part about the Windows option is that it's cheap (you only need to pay for a Windows license). On Sat, Jun 1, 2019, 12:53 PM Hansen, Christoffer wrote: > A solution based upon SSTP? >

[nanog] Re: SSL VPN

2019-06-01 Thread Hansen, Christoffer
A solution based upon SSTP? Have used SSTP on Mikrotik gear in the past. Works well once setup is done. https://wiki.mikrotik.com/wiki/Manual:Interface/SSTP *Windows do e.g. have built-in support for SSTP based VPN solutions. Christoffer

Re: SSL VPN

2019-06-01 Thread Colin Johnston
sophos utm vm cant beat that Sent from my iPod > On 1 Jun 2019, at 15:53, Mehmet Akcin wrote: > > Hey there > > I am trying to choose SSL VPN for a remote office 3-4 people max each any > given time. > > I have looked at Pulse and Cisco, and wanted to check in here for > recommendations on