Simple VPN software?

[Bruce123]

Can anyone recommend any VPN software?

 

The requirement is for a subset of staff (who have been allocated domain-joined laptops) to be able to use them to logon to the domain from home.

 

I not really talking about Remote Desktop, but being able to use the applications installed on the laptop from home and have access to school resources such as Network drives etc.

 

One solution we're potentially considering is called Pulse Connect Secure (VPN)

 

I'm not sure if this is a more appropriate best place to post this query... but any advice/suggestions would be appreciated.

 

Kind Regards,

 

Bruce.

[Norphy]

Are the laptops running Windows 10? If so, have you looked into Always On VPN, built into Windows 10 and Windows Server?

 

https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/always-on-vpn-technology-overview

[caffrey]

As above, I have a Routing and Remote Access VM set up for this purpose - just be mindful when setting it up

[Bruce123]

As above, I have a Routing and Remote Access VM set up for this purpose - just be mindful when setting it up

 

Mindful of what?

[caffrey]

Making sure your NPS policies are correct and in place, e.g I have an policy that only allows members of a certain AD group access - there are a lot of brute force attemps

 

Setting up the server is straightforward though and you only need 1 port forwarding - 1723 if I remember correctly, to it

[mavhc]

VPN is built into Windows 10, just set it up on their laptop and tell them to click it to connect

[Bruce123]

VPN is built into Windows 10, just set it up on their laptop and tell them to click it to connect

 

Can you choose to connect to the VPN before logging onto the laptop, otherwise it's a "Catch 22"?

[mavhc]

Well, the password hash would be cached by default so that's not a problem if it's their own laptop, but it's possible with some methods of configuration, however VPNs are normally per user, not per device, which is annoying

[jtotheb]

Can you choose to connect to the VPN before logging onto the laptop, otherwise it's a "Catch 22"?

 

You can have a device tunnel Always ON VPN in Windows 10 that can automagically establish the VPN connection prior to user login. Requires no user action. It's swings and roundabouts TBH. When it works the seamlessness is great, but as it all happens without any user intervention there's no feedback to the user if there's a problem.

[mavhc]

Device tunnel does require paying for Windows every year though, only Enterprise/Education versions

[highsky]

I had to figure bit about them recently.

Your firewall doesn't give you any VPN options?

 

Our one gives a few, we went for the Open SSL one.

 

After configuring the options you get to export the client file, install it and import the settings.