VPN Server

[reaser]

We've been using a managed VPN services with Verizon on our network and it provides a portal to create users and manage permissions for them. I'm thinking I'd rather host it internally as we plan to move away from Verizon as an MPLS provider.

I know Server 2008 has a VPN role but was wondering if there were any 3rd party applications that may provide more with permissions and interface and so on as I'm just used to MS leaving so much to be desired with its applications.

Would using the VPN role in 2008 be fine or are there better solutions? We have only between 5 and 10 VPN users running Windows 7, there may be 1 or 2 still on XP.

[YeOldeStonecat]

I much prefer a dedicated appliance to handle the VPN duties. I don't want that service of a Windows server exposed on the internet. Nor to bog down a server with more CPU tasks. Offloading the VPN duties to a quality dedicated VPN appliance ends up on less problems for the server, and better performance for the remote user.

Now....SSL VPN is much easier to setup, and support....versus the older VPN types where you had to install a software VPN client, such as IPSec VPN. Those ended up being time consuming support tasks. SSL VPN...most of them are all purely browser based....remote user logs in via a web access portal...the first time, a little java applet gets installed..and it's done! Wonderfully easy, so few support issues. It just works!

I'm a big fan of Junipers SA series SSL appliances. But I'll admit, for under 10 users...a little overkill and pricey.
Sonicwall, Netgear, ZyXell, Watchguard, Barracuda, amongst others.

if you want to build your own open source product...there was a cool product called "SSL Explorer". But they dissolved and got picked up by Barracuda.
There was a group of people that continued to try to fork the product...called Adito, but they broke down. So yet another group picked up the ball and it's currently called OpenVPN-ALS.
http://sourceforge.net/apps/trac/openvpn-als/wiki

http://www.amahi.org/apps/openvpn-als

[MarvinHarris]

Thanks YeOldeStonecat this helped me finally get a VPN server going on my network!