I might recommend OpenVPN AS. They are license centric on seats but 3 seats come with the free appliance and fairly straight forward interface all while offering HA configuration so you may have many appliances as a fallback plus google authenticator and at least one other I don’t recall off hand. LDAP auth is also there.
If anything give the free appliance a run through in a VM you might be happy you did. Good luck https://openvpn.net/vpn-server/ -- J. Hellenthal The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume. > On Sep 28, 2020, at 03:09, Dmitry Konchanin <dmitry.koncha...@dtsanz.com> > wrote: > > > Forticlient can do multifactor to some extend. There are pretty expensive > "branded" token based option, built-in email-to-sms and ability to use > basically any time of MFA via Radius. And no any additional costs/licenses, > all comes with a box. (except tokens). > > It's still probably less flexible than dedicated VPN devices (like Pulse), > but if it fits requirements then for sure price effective. > > Kind regards, > Dmitry Konchanin > > > On 28/09/2020 5:37 pm, John Cenile wrote: >> G'day Noggers, >> >> I was hoping to get some recommendations on VPN solutions people out there >> are using. >> >> Currently we're using a Cisco ASA with the AnyConnect client, however we >> have found it to be quite limiting in some of the things we want to do (such >> as built in multifactor, restricting resources to groups, and the throughput >> of the device itself). >> >> Our main requirements are: >> Self hosted / on-premise appliance >> Multifactor support (preferably Google Authenticator) >> Windows, Mac, and iPhone clients >> >> I'm also looking at the Fortinet FortiClient software, but it looks very >> similar to AnyConnect, so I don't have high hopes for it. I'm also looking >> into the Business OpenVPN product. >> >> Any other suggestions / recommendations would be great. >> >> John Cenile >> Github >> Twitter >> >> >> _______________________________________________ >> AusNOG mailing list >> AusNOG@lists.ausnog.net >> http://lists.ausnog.net/mailman/listinfo/ausnog > _______________________________________________ > AusNOG mailing list > AusNOG@lists.ausnog.net > http://lists.ausnog.net/mailman/listinfo/ausnog
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ AusNOG mailing list AusNOG@lists.ausnog.net http://lists.ausnog.net/mailman/listinfo/ausnog
