Can Web Based VPN Solutions Do It All?
Bingo Foo asks: "My company is in the process of reviewing replacements to our existing multi-platform VPN, which has now been discontinued. I was under the impression that every major vendor's OS ships with a VPN configuration solution.
What gives? Are these not standard enough? Are they not secure enough? not flexible enough?
Regardless, our IT department is leaning toward a clientless, web-based solution, which frankly sounds too good to be true. Can simply directing your browser at the portal allow X11, NFS, SMB, AFP, ssh, etc. transparently through the firewall? Anyone have experience with Neoteris and their VPN?"
Assuming you need your entire local network to appear transparently on both ends, just subnet it out, and set the default route to the endpoint boxes, where you can set up a constant, encrypted tunnel between the two. Set them both up with two ethernet cards, one connection to the local network, and another to the internet, and set the machines to forward packets, set up the tunnel, and you probably won't have to touch it for years. There are tons of resources for this sort of thing, but for the google-challenged (which seems to cover a lot of Ask-Slashdot's recently), here you go.
You won't need much for hardware, and it will also allow you to do much better monitoring of traffic/security than most solutions would.
--That's the point of being root, you can do anything you want, even if it's stupid.
Can Web Based VPL Solutions Do It All?
Disapointed, I am.