I'm investigating switching to a Sophos UTM appliance from our current systems.
One piece that I am concerned about is the VPN deployment. The current practice is to deploy a Cisco VPN client. I would prefer to use the smaller footprint Sophos SSL Client (openVPN). Currently we us a SCCM 2012 deployment server to push out software to client PC's.
With Cisco VPN you push out a generic key that is used by everyone involved. From what I'm seeing with OpenVPN each client has their own private key file that is manually installed per the user portal.
So here are my questions:
1. Is there just a generic Sophos SSL MSI or EXE installer, that installs without installing the customized key files?
2. If there isn't, what is the usual practice for deploying Sophos SSL VPN with standard users who don't have Admin rights? The portal doesn't really seem like an option for none admin, none technical users.
3. I would love if there was just an all-in-one MSI or EXE package that can be deployed leaving the standard user only having to launch the VPN client and type in their username and password. Does this exist?
I love the idea of Sophos/Astaro UTM, I just hope these pieces are in place to tailor to the larger corporate environment.
On a side note, I've looked over PPTP, and L2TP as options as well. Our corporation has many people that travel internationally and my understanding is that using the SSL client will be the most compatible with all country standards (i.e. blocked protocols, double NATs, etc.).
Any input would be greatly appreciated!
Thanks,
Joel
One piece that I am concerned about is the VPN deployment. The current practice is to deploy a Cisco VPN client. I would prefer to use the smaller footprint Sophos SSL Client (openVPN). Currently we us a SCCM 2012 deployment server to push out software to client PC's.
With Cisco VPN you push out a generic key that is used by everyone involved. From what I'm seeing with OpenVPN each client has their own private key file that is manually installed per the user portal.
So here are my questions:
1. Is there just a generic Sophos SSL MSI or EXE installer, that installs without installing the customized key files?
2. If there isn't, what is the usual practice for deploying Sophos SSL VPN with standard users who don't have Admin rights? The portal doesn't really seem like an option for none admin, none technical users.
3. I would love if there was just an all-in-one MSI or EXE package that can be deployed leaving the standard user only having to launch the VPN client and type in their username and password. Does this exist?
I love the idea of Sophos/Astaro UTM, I just hope these pieces are in place to tailor to the larger corporate environment.
On a side note, I've looked over PPTP, and L2TP as options as well. Our corporation has many people that travel internationally and my understanding is that using the SSL client will be the most compatible with all country standards (i.e. blocked protocols, double NATs, etc.).
Any input would be greatly appreciated!
Thanks,
Joel