Open-source VPN
Posted on 12 Jul 2007 at 16:50
Simon Brock and Ian Wrigley examine two open-source VPNs that promise to deliver as much as their commercial rivals.
We elected to try out SSL-Explorer using a Windows server. Again, download and installation were simple, but configuration took some thought. On reflection, that wasn't because the system was hard to configure, but rather because the only way we could get into the application was via a 400-page administrator's manual. We could have done with a "Getting Started" manual. Once you get over this hurdle, the system is easy to configure via the web interface. You need to set up users for the system and then set up their access rights: you can set up web forwards so they can access web servers, network places so they can access shares, and application shortcuts to access various network-based applications like terminal servers and VNC servers. When a user logs in, they can see what they have access to and then select it. You can also set up arbitrary "per application" tunnels to allow access to resources such as mail servers.
Again, we managed to get everything up and running, and using the web interface makes the system easy to configure, with a great deal of useful help information and prompting. The users log in to the same web interface and again they get access to the services they want quickly. The proxy interface is slightly fiddly, because you need to work out how to access the local proxy when you're outside of the office, which potentially means you may have to use different addresses to access your mail server inside and outside. However, you can get full network access such as OpenVPN, but only if you pay for the enterprise version. SSL-Explorer is an interesting and good product, which provides much finer control over what a user has access to, and can be used in different environments from OpenVPN.
OpenVPN and SSL-Explorer represent quite different approaches to building a VPN and to open source. OpenVPN is a "pure" open-source product with no restrictions on what you get and how you use it, but also without commercial support, while SSL-Explorer is a commercial open-source product, where the community edition provides you with a taster of what you'll get if you spend money on it. We went for OpenVPN, which does what we want, works on all the platforms we have and offers a simple, resilient solution.
From around the web
advertisement
- How to make Google AdWords work for your business
- The curse of sloppily written software
- Paying for your crimes with Bitcoin
- Behind the scenes: tech support for Formula 1
- The security risk of fat fingers
- Why Windows Phone 7 isn't quite ready for business
- When will Microsoft stop fiddling with Windows 8?
- Flash down the pan?
- Metro Style apps vs desktop applications
- Coping with Facebook changes
- Chrome's shine getting lost in translation
- BytePac: the cardboard hard disk enclosure
- How tech loosens our grip on reality
- Hokum watch: Safer Internet Day
- Why I'm deleting Adobe from my PC
- Prepare to be patronised: it's Safer Internet Day
- Dear Sony, Samsung and every other tech company in the world: stop trying to be Apple
- Will Apple's Final Cut Pro X update placate the pros?
- Smartr Contacts for iPhone review
- Switching to Office 365's Outlook Web App
- VeriSign slammed for security breach cover-up
- SAP willing to share HANA with Oracle
- Why using a tablet could harm your health
- New RIM boss: no need for drastic change
- RIM founders fall on their swords
- Slow economy helps boost Red Hat revenue by 23%
- Google+ pages get multiple admins
- One in five companies lack card industry compliance
- Oil industry warns hacking attacks could kill
- British workers fear email monitoring
advertisement

