Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Replacement for cisco webvpn

    Scheduled Pinned Locked Moved pfSense Packages
    8 Posts 5 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      ccc-ottawa
      last edited by

      Hello,
      I am looking to replace our company's Cisco ASA 5510 with a pfSense machine.  A lot of the change over is straight forward, but we use the webvpn portal (Cisco's VPN/RDP in a browser via activex control) extensively.

      Is there a similar module/package for pfsense?  Or could some recommend a solution (if not too off topic)?

      Thank you.

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Why not just use openvpn and users just rdp to whatever it is on your network they want to rdp?

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • C
          ccc-ottawa
          last edited by

          The PC's that are accessing the web portal are not under my control.  The most we had been able to negotiate with these sites was allowing the browser control to run.

          And with our user base, the solution has to be very turnkey, which the webvpn was.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            We don't have a browser-based VPN (which still is a client, just a browser plugin/control) because there is no open source implementation of one that is current/maintained.

            There was one a long time ago, Adito/OpenVPN ALS, but it died off. I'm not sure if anyone has picked it back up or if anything has come along to replace it. It was Java (ew) but it was browser-based.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              "The PC's that are accessing the web portal are not under my control"

              So your saying rdp client on these machines is locked so users can not use it? Or your saying they allowed you to let the users run a browser addon but not an actual client?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • C
                ccc-ottawa
                last edited by

                The clients who own/operate the PCs allow our company's personnel access.  We have been permitted to have the browser add-on installed.  Any full client was rejected.

                1 Reply Last reply Reply Quote 0
                • D
                  doktornotor Banned
                  last edited by

                  @ccc-ottawa:

                  We have been permitted to have the browser add-on installed.  Any full client was rejected.

                  Makes sense. Because the browsers are the first thing targeted with malware and exploits…

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate
                    last edited by

                    Guess you have to continue to pay the piper.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.