clientless SSL VPN (WEBVPN)

[kapara]

I am wondering if this is possible with an opensource option that can be added to OPNsense or another dedicated appliance inside a network.

I have deployed a synology MR2200ac and the webvpn works incredibly well and eliminates the need for a client.  User can just log into a web interface and connect to the entire internal network.

They also offer web http and https page redirection and RDP and VNC embedded in the web interface.  You can actually bookmark devices for access.

the device is only $139 and maybe it would just be easier to deploy it behind the OPNsense firewall rather than hoping someday this would be available.  Still hoping :-)

[fabian]

you can try guacamole (https://guacamole.apache.org/) - the server is written in C, the client in Java so all build dependencies should be in the ports tree.

[kapara]

Thank you for that.  I assume that is something that would have to be implemented inside the network and not on the OPNsense box.  There still is the issue of clientless webvpn which is more of an importance.

[mimugmail]

It is out of scope .. sorry

https://github.com/opnsense/tools/issues/91

[fabian]

sure but it still can be built manually and I am pretty sure that is not so hard to get the guacamole server, wildfly, the guacamole client, java and the other dependencies installed from ports tree (at own risk).

opnsense-code ports tools

then navigate into /usr/ports and install whatever you need. Please note that this will build everything you may be missing so make sure you have enough disk space.

[mimugmail]

Then I'd rather try installing HBSD pkg's (at own risk)