VPN

[discoveranother]

Hi all

 

Just wondered what low cost VPN solutions are out there to allow remote access from home to a business network for staff ?

 

Many thanks

[JackCPickup]

Take a look at ZeroTier.

[discoveranother]

Many thanks for that.

 

If I may before I check it out, does this allow for free connections to business remotely ? Does it work well ?

[Blue_Cookeh]

Use pfSense or some other UTM platform that lets you use L2TP/IPSec/OpenVPN

[LytchettNM]

If you have windows servers, static IP address and your users are taking a company owned laptop home you can setup direct access for free.

[discoveranother]

If you have windows servers, static IP address and your users are taking a company owned laptop home you can setup direct access for free.

 

Using which application please ?

[Katy]

Using which application please ?

 

Using the Remote Access role on Windows Server. Domain joined clients connect automatically and don't need anything installing on them.

[discoveranother]

Using the Remote Access role on Windows Server. Domain joined clients connect automatically and don't need anything installing on them.

 

Ah you mean the RDP. I was thinking more in line with the VPN solution. I don't really want to be purchasing for extra licensing to RDP.

[Katy]

Ah you mean the RDP. I was thinking more in line with the VPN solution. I don't really want to be purchasing for extra licensing to RDP.

No, Remote Access has nothing to do with Remote Desktop Services.

[LytchettNM]

Microsoft does provide a VPN solution called “Direct Access” that does NOT require terminal services licensing.

You install direct access on the server that is going to manage your DA connection, during this installation and then it’s configuration it will create a group policy object so the computers you add to this group will be able to make an automatic VPN type connection while they are not within the LAN.

The wizard to set up Direct Access is very good but you will need a static public IP address.

[LytchettNM]

https://docs.microsoft.com/en-us/windows-server/remote/remote-access/directaccess/directaccess

[LytchettNM]

The following client operating systems support DirectAccess.

 

- Windows 10[emoji768] Enterprise

- Windows 10[emoji768] Enterprise 2015 Long Term Servicing Branch (LTSB)

- Windows[emoji768] 8 and 8.1 Enterprise

- Windows[emoji768] 7 Ultimate

- Windows[emoji768] 7 Enterprise

[discoveranother]

Microsoft does provide a VPN solution called “Direct Access” that does NOT require terminal services licensing.

You install direct access on the server that is going to manage your DA connection, during this installation and then it’s configuration it will create a group policy object so the computers you add to this group will be able to make an automatic VPN type connection while they are not within the LAN.

The wizard to set up Direct Access is very good but you will need a static public IP address.

 

That's very interesting, thank you for that. good to know.

 

On the downside, most of the clients are on Windows 7 Pro !!!

 

But good to know about the Direct Access.

 

Thanks.

[markwilfan]

If you are running win 10 look at "AlwaysOn vpn". Direct access is being depreciated and this is its replacement. It's awesome and easier to set up than DA

[discoveranother]

If you are running win 10 look at "AlwaysOn vpn". Direct access is being depreciated and this is its replacement. It's awesome and easier to set up than DA

 

Thank you, interesting stuff. I think that is something to look at in time, as this client is on Windows 2008 R2 and most clients are on Windows 7 Pro, so they need an immediate solution before they spend money on upgrades.