Re: SSL VPN

[Mark Tinka <mark.tinka () seacom mu>]

On 13/Jun/19 20:06, Matt Harris wrote:

> With the client config generator package, "openvpn-client-export",
> installed, this is imho the best option for an end-user VPN. pfSense
> has a much nicer UI than OpenVPN AS, and that UI also supports other
> things you might need (like routing protocols via bird or quagga,
> managing the firewall, etc) as well. I can't see any reason to pay
> money for OpenVPN AS when you compare it to what you get for free with
> pfSense.  The NetGate pfSense appliances are quite nicely spec'd, too,
> if you just have cash burning a hole in your pocket.  It also easily
> ties in OpenVPN authentication to RADIUS or LDAP, and getting it
> working with Active Directory on the backend is trivially simple.

+1.

Mark.