?
Solved

SSL VPN from a Mac to a Sonicwall TZ105 - what is required

Posted on 2013-05-28
4
Medium Priority
?
1,026 Views
Last Modified: 2013-06-03
I have a client with a small network (10 machines on a 25 Mbps symmetrical fiber connection).  The client is Mac based and has requested the ability to VPN in from the outside.  

From what I can tell, I believe I can do this with the Sonicwall TZ105 and using the SSL VPN client built into the Mac (OS X 10.8).  I'd be using local accounts that I'd store/create on the Sonicwall itself.  I'm not a Mac expert, so I'd appreciate the advice of those who have done this before.  

Will the Sonicwall TZ105 do what I need?  Will it have what I need out of the box?  Do I need to add anything extra beyond what's in the box?

The goal of this process is to give access to LAN Mac desktops from users when they are at home.  

I'm much more familiar with PPTP VPNs whether they are hosted by a Windows server or another firewall endpoint.  

Thank you
0
Comment
Question by:dmessman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 20

Accepted Solution

by:
carlmd earned 2000 total points
ID: 39204989
The TZ105 is a UTM (firewall) device that will do what you want and a lot more. Do you really want a UTM device, or just an SSLVPN appliance?

The TZ105 comes with one SSLVPN license, and can support a maximum of 5. The additional licenses must be purchased.

In order to get up to 10 possible SSLVPN licenses you would have to purchase a TZ205. It comes with one SSLVPN and the additional can be purchased.

If you do not want/need a UTM (firewall) device, then you might consider the Sonicwall SRA1600 (Secure Remote Access), which comes with a 5 user SSLVPN license than can be upgraded to a maximum of 50.

Using the SSLVPN does not require you use any MAC clients. What you need locally will be downloaded on the first use.
0
 
LVL 9

Author Comment

by:dmessman
ID: 39207662
This perfectly answered my question.  

This might be the dumbest question after asked - but does an SSL VPN require an SSL certificate?  This will be important as I estimate costs.

Since the number of simultaneous VPNs will be minimal and the client will want to keep costs down, I'll probably go with the TZ105 and not the SRA1600, though that advice was extremely helpful.

Thanks
0
 
LVL 20

Expert Comment

by:carlmd
ID: 39207703
No, you do not require an SSL certificate to use the SSLVPN. All that is necessary is provided by the Sonicwall.

There is one more thing to consider. You mention 10 MACS on the network but not what they are doing. Keep in mind that all traffic will be passing through the Sonciwall all the time, so throughput needs to be considered. If the 10 users are doing heavy graphics or engineering, and up and down loading may files, this might be an issue requiring a faster Sonicwall. If they are just "normal" business type users, it should not be an issue.
0
 
LVL 9

Author Closing Comment

by:dmessman
ID: 39216125
excellent, complete answer to my question
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question