OpenVPN Access Server as Public Cloud-to-Private LAN Forwarder with pfSense?
-
Hi,
We need to provide access to an on-prem CRM portal for a 3rd-party leads generation company. We use a Netgate 1537 pfSense+ appliance, all our remote employees use OpenVPN and it works great for us. However, we can't expect outside independent contractors to download an unfamiliar VPN client for access to our CRM.
We've started hybridizing a bit with DigitalOcean cloud VMs. I'm thinking it should be possible to provision a cloud-based OpenVPN Access Server that serves as some kind of site-to-site connection into our private LAN through our on-prem pfSense firewall using a separate OpenVPN config profile. Has anyone done this?
I could issue certificates for each of the independent contractors from the leads generation company to securely connect to the cloud OVPN-AS. When they hit our firewall via some site-to-site cxn, I can park them on a VLAN which is only allowed to access the locked-down CRM portal I setup just for them.
This should be a good way to allow private web app access to a group of authorized individuals over the Web without the use of VPNs or DMZ proxies, right?? Has anyone implemented this and can provide any advice on it?? Any sentiments would be highly appreciated, thanks!!
