[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] can I use web browser as client to access openvpn?


  • Subject: Re: [Openvpn-users] can I use web browser as client to access openvpn?
  • From: Charlie Hosner <chosner@xxxxxxxxx>
  • Date: Mon, 2 Aug 2004 09:10:26 -0400 (EDT)

Right, I understood what you meant the first time.  The answer is still
no.  Other "SSL VPNs" are often using that name incorrectly IMHO.
Companies like Aventail, Whale, F5, Cisco, Netscreen, Nokia, EPN, and
Checkpoint all have what they call clientless SSL VPN's.  This is very
confusing for the marketplace as these
are not really creating a VPN, they are doing proxying to internal web
based resources or they are doing application translation from non-web
based internal resources (like file sharing) into web based formats.
These are the only functions they provide in a clientless way.  The few
products that do true network extension require a client.  The security
implications of this are quite severe, and these companies are again,
IMHO, being a little bit misleading and negligent by allowing this type of
access and bundling it with the label VPN.

OpenVPN is not going to allow a connection to a machine without the OpenVPN client
installed and configured, and rightly it shouldn't.  There are many
technologies out there that will act as SSL gateways, you can do it with
Apache to a degree, or with firewall rules and port forwarding.  OpenVPN
is not an SSL gateway and you won't be able to use it as one.  You can
however use it as an excellent VPN.  ;)

I know this can be really confusing, partly because of all the marketing
noise being produced by the commercial SSL VPN makers.  If you have more
questions about this please let me know and I'll try to make it more
clear.

Charlie

On Fri, 30 Jul 2004, Yang, Ye wrote:

> Hi,
>
>       I  mean config openvpn as a vpn server, but not install client software on windows client machine.  Is that possible?  This is the way many ssl vpn work.
>
>      Thank you!
>
>
>
> Best Regards.
> Ye, Yang
>
>
>
>
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by OSTG. Have you noticed the changes on
> Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
> one more big change to announce. We are now OSTG- Open Source Technology
> Group. Come see the changes on the new OSTG site. www.ostg.com
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users