[olug] Firewall / VPN Devices

[Dave Rowe]

Dan Linder wrote:
> On Wed, Oct 7, 2009 at 11:11,  <charles.bird at powerdnn.com> wrote:
>> Ya, I've heard nothing but good things about pfsense, another company in omaha
>> had 2yrs uptime on their pfsense boxes and had a lot of vpn traffic running
> 
> I had to replace my home-brew ancient firewall recently and tried
> pfSense.  It would have been great, except for the fact that the BSD
> kernel can only handle one Microsoft VPN through it at once (the Linux
> kernel can keep track of multiple VPN tunnels through it).
> 
> I ended up going with Vyatta - it's Linux based so that meant my
> work-related VPNs functioned, it has a GUI to make the initial
> learning stage less steep, and it has a cli much like Cisco which I
> cut my networking teeth on (they're just behind the eye-teeth..)
> 
> Just my $0.02 worth...
> 
> Dan
> 

Yeah, looking at Untangle, it seems nice given the limited knowledge
required to get up and running - but I'm curious about the Vyatta /
pfSense experience.  My boss (and I) don't really want to spend a lot of
time configuring, or really messing with the appliance that much.
That's where Untangle seems to get a bit of a bigger win.  Though, my
limited experience with Vyatta is simply some of the online video demos.

Does pfSense / Vyatta have an interface for SSL VPN (via browser), a la,
no local client install?  We have a couple users, who we'd rather be
able to point to a URL, they login, and they're in, rather than having
to configure a client, install it, and support it for them, etc.

-Dave