Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

SSL-VPN Concept

$
0
0
Hello Guys,

we're searching for an alternative way to grant remote access into the lan of one of our customers.
Actually we've dedicated ISDN-routers (Bintec), which are switched on/off via a managable power socket (http instructions to switch on/of the socket itself, so the attached device is on/off). the advantage of this kind is the possibility to grant access to third partys only when they do a phone call before an after (finished), then the line will be switched off an no one have further access. the VPN is' realized via (older) PPTP.

Now we'll switch over to an astaro.
There we have several accounts, the packet filter rules are set to the dedicated accounts (SSL-VPN IP for User A) to grant access via e.g. RDP to an specific host.

So i can set an management-user who enable/disable the corresponding filter rules (so access is possible or not), but that way is' to complicated to handle (the users who should manage this arent very it-addicted ;) )

Our idea is to connect a switch after the astaro, configure VLANs (2 Port for each network, Astaro---Switch---Subnet X) and enable/disable the internal port ( switch ---- Subnet X) via http requests.

The only Problem is: I don't know which brand have switches where i can enable/disable Ports via http(s) requests ? There must be a possibility to control this ports via an .NET-Application.

Thx in advance,

Manuel aka Umpf

Viewing all articles
Browse latest Browse all 14361

Trending Articles