<div dir="ltr">Thanks everyone for your replies on and off list, I have a good list to start looking through now.<div><br></div><div><div style="color:rgb(136,136,136)"><font color="#999999">John Cenile</font></div><div style="color:rgb(136,136,136)"><a href="https://github.com/john30" target="_blank">Github</a></div><div style="color:rgb(136,136,136)"><a href="https://twitter.com/cenilejohn" target="_blank">Twitter</a></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 29 Sep 2020 at 01:06, Brad Peczka <<a href="mailto:brad@bradpeczka.com">brad@bradpeczka.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-AU">
<div class="gmail-m_-6503411987269225906WordSection1">
<p class="MsoNormal"><span>I’ll also throw a vote in for Palo Alto - the GlobalProtect client is a solid product, as is the rest of the box.
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>They’re not cheap, but pricing can be whittled down to and will get competitive if you’ve got a good reseller and do the usual buy x years of maintenance/subscriptions in advance.
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Note also that you don’t need the GlobalProtect license to enable client VPN – but it does provide some nifty features that may, or may not, be useful to you.
<a href="https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html" target="_blank">
https://docs.paloaltonetworks.com/globalprotect/9-1/globalprotect-admin/globalprotect-overview/about-globalprotect-licenses.html</a>
<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Regards,<u></u><u></u></span></p>
<p class="MsoNormal"><span>-Brad.<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> AusNOG <<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>>
<b>On Behalf Of </b>DaZZa<br>
<b>Sent:</b> Monday, 28 September 2020 12:56 PM<br>
<b>To:</b> John Cenile <<a href="mailto:jcenile1983@gmail.com" target="_blank">jcenile1983@gmail.com</a>><br>
<b>Cc:</b> <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>> <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
<b>Subject:</b> Re: [AusNOG] Client VPN Solutions<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">Depends on your budget.<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I run Palo Alto's at my edge - and they do all of the above. And you can make them work with Linux too.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Expensive as hell, and they're firewalls with added features, not just VPN devices, but they're worth the money for mine.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">D<u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12pt"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Mon, 28 Sep 2020, 2:38 pm John Cenile, <<a href="mailto:jcenile1983@gmail.com" target="_blank">jcenile1983@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">G'day Noggers,<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I was hoping to get some recommendations on VPN solutions people out there are using.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Currently we're using a Cisco ASA with the AnyConnect client, however we have found it to be quite limiting in some of the things we want to do (such as built in multifactor, restricting resources to groups, and the throughput of the device
itself).<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Our main requirements are:<u></u><u></u></p>
</div>
<div>
<ul type="disc">
<li class="MsoNormal">
Self hosted / on-premise appliance<u></u><u></u></li><li class="MsoNormal">
Multifactor support (preferably Google Authenticator)<u></u><u></u></li><li class="MsoNormal">
Windows, Mac, and iPhone clients<u></u><u></u></li></ul>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<div>
<p class="MsoNormal">I'm also looking at the Fortinet FortiClient software, but it looks very similar to AnyConnect, so I don't have high hopes for it. I'm also looking into the Business OpenVPN product.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Any other suggestions / recommendations would be great.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:rgb(153,153,153)">John Cenile</span><span style="color:rgb(136,136,136)"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(136,136,136)"><a href="https://github.com/john30" target="_blank">Github</a><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:rgb(136,136,136)"><a href="https://twitter.com/cenilejohn" target="_blank">Twitter</a><u></u><u></u></span></p>
</div>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</blockquote></div>