OPNsense Forum

English Forums => General Discussion => Topic started by: kapara on April 26, 2019, 09:10:09 pm

Title: clientless SSL VPN (WEBVPN)
Post by: kapara on April 26, 2019, 09:10:09 pm
I am wondering if this is possible with an opensource option that can be added to OPNsense or another dedicated appliance inside a network.

I have deployed a synology MR2200ac and the webvpn works incredibly well and eliminates the need for a client.  User can just log into a web interface and connect to the entire internal network.

They also offer web http and https page redirection and RDP and VNC embedded in the web interface.  You can actually bookmark devices for access.

the device is only $139 and maybe it would just be easier to deploy it behind the OPNsense firewall rather than hoping someday this would be available.  Still hoping :-)
Title: Re: clientless SSL VPN (WEBVPN)
Post by: fabian on April 27, 2019, 10:52:58 am
you can try guacamole (https://guacamole.apache.org/) - the server is written in C, the client in Java so all build dependencies should be in the ports tree.
Title: Re: clientless SSL VPN (WEBVPN)
Post by: kapara on April 28, 2019, 05:52:56 pm
Thank you for that.  I assume that is something that would have to be implemented inside the network and not on the OPNsense box.  There still is the issue of clientless webvpn which is more of an importance.
Title: Re: clientless SSL VPN (WEBVPN)
Post by: mimugmail on April 28, 2019, 06:12:04 pm
It is out of scope .. sorry

https://github.com/opnsense/tools/issues/91
Title: Re: clientless SSL VPN (WEBVPN)
Post by: fabian on April 28, 2019, 09:06:21 pm
sure but it still can be built manually and I am pretty sure that is not so hard to get the guacamole server, wildfly, the guacamole client, java and the other dependencies installed from ports tree (at own risk).

opnsense-code ports tools

then navigate into /usr/ports and install whatever you need. Please note that this will build everything you may be missing so make sure you have enough disk space.
Title: Re: clientless SSL VPN (WEBVPN)
Post by: mimugmail on April 28, 2019, 09:33:09 pm
Then I'd rather try installing HBSD pkg's (at own risk)