Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread John Cenile
t-licenses.html > > > > Regards, > > -Brad. > > > > *From:* AusNOG *On Behalf Of *DaZZa > *Sent:* Monday, 28 September 2020 12:56 PM > *To:* John Cenile > *Cc:* > *Subject:* Re: [AusNOG] Client VPN Solutions > > > > Depends on your budget. &

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread J. Hellenthal
I might recommend OpenVPN AS. They are license centric on seats but 3 seats come with the free appliance and fairly straight forward interface all while offering HA configuration so you may have many appliances as a fallback plus google authenticator and at least one other I don’t recall off

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread Brad Peczka
, -Brad. From: AusNOG On Behalf Of DaZZa Sent: Monday, 28 September 2020 12:56 PM To: John Cenile Cc: Subject: Re: [AusNOG] Client VPN Solutions Depends on your budget. I run Palo Alto's at my edge - and they do all of the above. And you can make them work with Linux too. Expensive as hell

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread Greg Lipschitz
.net Subject: [AusNOG] Client VPN Solutions G'day Noggers, I was hoping to get some recommendations on VPN solutions people out there are using. Currently we're using a Cisco ASA with the AnyConnect client, however we have found it to be quite limiting in some of the things we want t

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread Dmitry Konchanin
Forticlient can do multifactor to some extend. There are pretty expensive "branded" token based option, built-in email-to-sms and ability to use basically any time of MFA via Radius. And no any additional costs/licenses, all comes with  a box. (except tokens). It's still probably less

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread Mark Anthony Delfin
On the cheap side of things, Openvpn Access Server can be used as well. * Supports MFA * Wide support for a lot of OS (Windows, Linux, Mac0S, android, IOS) * LDAP integration * Load balancing. On Mon, Sep 28, 2020 at 5:19 PM Chris Barnes wrote: > Might be on the pricier side of things but F5

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread Jacob Taylor
I quite like the Pulse Secure offering. Highlights include: - Supports complex access policies - I once configured a policy that assigned different IP pools based on AD group membership - Supports MFA through any standard RADIUS provider, also has plugins for native Okta and Duo

Re: [AusNOG] Client VPN Solutions

2020-09-28 Thread Chris Barnes
Might be on the pricier side of things but F5 Big-IP can be used, you'll need to license the APM (Access Policy Manager) feature and the number of seats you need. Windows 10, iOS and Android support. Mac is also supported but i think only through browser plug-in (could be wrong). it has its own

Re: [AusNOG] Client VPN Solutions

2020-09-27 Thread Bradley Amm
Of Burt Mascareigne Sent: Monday, 28 September 2020 12:48 PM To: John Cenile ; ausnog@lists.ausnog.net Subject: Re: [AusNOG] Client VPN Solutions We use SOPHOS The agent uses a generic OpenSSL client (it’s modified for SOPHOS) but you can, if you want use the standard OpenSSL one. The 2FA

Re: [AusNOG] Client VPN Solutions

2020-09-27 Thread DaZZa
Depends on your budget. I run Palo Alto's at my edge - and they do all of the above. And you can make them work with Linux too. Expensive as hell, and they're firewalls with added features, not just VPN devices, but they're worth the money for mine. D On Mon, 28 Sep 2020, 2:38 pm John Cenile,

Re: [AusNOG] Client VPN Solutions

2020-09-27 Thread Burt Mascareigne
, as the password transmitted every time is unique, but people are use to be “prompted” a 2FA code. /Shrug From: AusNOG On Behalf Of John Cenile Sent: Monday, September 28, 2020 2:38 PM To: ausnog@lists.ausnog.net Subject: [AusNOG] Client VPN Solutions G'day Noggers, I was hoping to get some

[AusNOG] Client VPN Solutions

2020-09-27 Thread John Cenile
G'day Noggers, I was hoping to get some recommendations on VPN solutions people out there are using. Currently we're using a Cisco ASA with the AnyConnect client, however we have found it to be quite limiting in some of the things we want to do (such as built in multifactor, restricting