Remote Access to School System - Using SSL Explorer READHERE

Let me introduce a product called SSL Explorer (http://3sp.com/showSslExplorerCommunity.do)

You may of heard of SSLBridge, but this is so much more than that product.

I have this installed on my Ubuntu 6.0.6.1 LAMP Server 64bit running on a HP proliant DL380G4 server.(with ubuntu-desktop enabled)

1. Goto http://sourceforge.net/project/showf...kage_id=125980
and download 'sslexplorer_linux_0_2_14_01.sh' (version numbers will change). You can save this file anywhere, i usually save it in the /home/*user* folder

2.Change the mode of the file executable - chmod 755 /home/*user*/sslexplorer_linux_0_2_14_01.sh

3. Execute the file as root or sudo - A gui environment must be running - gnome preferably.

4.Follow the instructions - keep the defaults, if you are going to use the AD setup then follow this flash demo for assistance - http://3sp.com/products/ssl-explorer...ion_Wizard.htm
and http://3sp.com/kb/idx/75/0/

5.Once the setup is finished a file in the /etc/init.d/sslexplorer will be created - this is to start and stop the sslexplorer engine.

Once you have followed the on screen instructions.

Goto your server address - https://youserver.com - then log in.

For more guidence follow the front page flash examples

http://3sp.com/showSslExplorerCommunity.do

Any problems give me a buzz

Nice one. I had a quick go at this product a while ago but could not get it working.

Quote:

---

Execute the file as root or sudo - A gui environment must be running - gnome preferably.

---

Gah! GUI on a server? :(

Quote:

---

Originally Posted by Geoff

Quote:

---

Execute the file as root or sudo - A gui environment must be running - gnome preferably.

---

Gah! GUI on a server? :(

---

I agree with that!

None of my unix/linux servers ever have X on. Before there was a vmware gui-less installer for APC powerchute I had to setup a redhat 7 vm especially to install and configure it before I could copy the files to the esx console.

SSLExplorer has been punted about several times in the past when relating to remote access.

Can it integrate with AD or just use LDAP when installed on a nix server then?

I was thinking of installing it on one of my AD servers and then forwarding the 443 requests from the firewall to it.

Ben

Quote:

---

Gah! GUI on a server?

---

You can use the RPM instead. The only difference in the instructions is that you have to manually launch the installation wizard once the RPM has been installed. Just cd into /opt/sslexplorer and run install-sslexplorer script.

Quote:

---

Can it integrate with AD or just use LDAP when installed on a nix server then?

---

Yes, although LDAP is an Enterprise 'pay for' feature, AD is free in the open source version.

Quote:

---

You can use the RPM instead. The only difference in the instructions is that you have to manually launch the installation wizard once the RPM has been installed. Just cd into /opt/sslexplorer and run install-sslexplorer script.

---

er, tgz or deb's here. Is there not just a text file I can edit?

Geoff - maybe you could use "alien"?

I have SSL explorer fully configured and working for remote access to our network. See the front page at https://www.nbc.medway.sch.uk:49302

It's integrated with active directory and my network. Staff get access to their home directory and read only access to the public share. Also if they have a desktop machine, we've enabled remote access on them and set up shortcuts so they can even remotely login to a proper workstation using the full VPN features of SSL explorer to connect to it. (This has enabled out timetabler to work from home for the last 3 weeks, and she reports that the access is quick and ultra reliable.) We're looking at a terminal server in the future to enable all staff to login to a proper workstation environment from home.

I've also created a support account that I can give to people I'm on the phone to for support, so if they lack their own remote support package they can still see my screen and control it via VNC.

We're hoping to extend remote file access to students later this year using it as well, waiting for more staff feedback first thou, as we only officially launched it to staff this week. Also want to see how reliable it is when more than a few users are using it.

All in all I love SSL explorer, and would recommend it to anyone wanting to set up VPN access on a tight budget.

Mike

Quote:

---

Originally Posted by tom_newton

Geoff - maybe you could use "alien"?

---

eww

Quote:

---

Originally Posted by Geoff

Gah! GUI on a server? :(

---

I though you ran Citrix and stuff?

Quote:

---

Originally Posted by NetworkGeezer

Quote:

---

Originally Posted by Geoff

Gah! GUI on a server? :(

---

I though you ran Citrix and stuff?

---

That's windows though :)

Mike

Think i am going to have a good play with this. Never seen this before and from first glance it looks awsome. PLease could you PM me on how well it works as more people use it?

Im going to install it on my home machine.

You /could/ have a gui on a server...there's nothing to say that you need to have it started though.

Just start it if you absolutely need it for daft software that doesnt have a lovely terminal based config/setup etc with ncurses. I agree though. GUI on a server is best avoided imo.

It /does/ look interesting but what is the advantage over an existing PPTP VPN? The browser based access?

Does it support altering network routes so that the end-user can configure it so that various IP ranges or subnets can be sent down the VPN like you can do with pptpconfig for example?

Quote:

---

PPTP

---

PPTP is brain damaged. Use IPSEC for new VPN implementations if possible. If, however, you must use MS based protocols, use L2TP.