Solved

SSL VPN from a Mac to a Sonicwall TZ105 - what is required

Posted on 2013-05-28
4
1,025 Views
Last Modified: 2013-06-03
I have a client with a small network (10 machines on a 25 Mbps symmetrical fiber connection).  The client is Mac based and has requested the ability to VPN in from the outside.  

From what I can tell, I believe I can do this with the Sonicwall TZ105 and using the SSL VPN client built into the Mac (OS X 10.8).  I'd be using local accounts that I'd store/create on the Sonicwall itself.  I'm not a Mac expert, so I'd appreciate the advice of those who have done this before.  

Will the Sonicwall TZ105 do what I need?  Will it have what I need out of the box?  Do I need to add anything extra beyond what's in the box?

The goal of this process is to give access to LAN Mac desktops from users when they are at home.  

I'm much more familiar with PPTP VPNs whether they are hosted by a Windows server or another firewall endpoint.  

Thank you
0
Comment
Question by:dmessman
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 20

Accepted Solution

by:
carlmd earned 500 total points
ID: 39204989
The TZ105 is a UTM (firewall) device that will do what you want and a lot more. Do you really want a UTM device, or just an SSLVPN appliance?

The TZ105 comes with one SSLVPN license, and can support a maximum of 5. The additional licenses must be purchased.

In order to get up to 10 possible SSLVPN licenses you would have to purchase a TZ205. It comes with one SSLVPN and the additional can be purchased.

If you do not want/need a UTM (firewall) device, then you might consider the Sonicwall SRA1600 (Secure Remote Access), which comes with a 5 user SSLVPN license than can be upgraded to a maximum of 50.

Using the SSLVPN does not require you use any MAC clients. What you need locally will be downloaded on the first use.
0
 
LVL 9

Author Comment

by:dmessman
ID: 39207662
This perfectly answered my question.  

This might be the dumbest question after asked - but does an SSL VPN require an SSL certificate?  This will be important as I estimate costs.

Since the number of simultaneous VPNs will be minimal and the client will want to keep costs down, I'll probably go with the TZ105 and not the SRA1600, though that advice was extremely helpful.

Thanks
0
 
LVL 20

Expert Comment

by:carlmd
ID: 39207703
No, you do not require an SSL certificate to use the SSLVPN. All that is necessary is provided by the Sonicwall.

There is one more thing to consider. You mention 10 MACS on the network but not what they are doing. Keep in mind that all traffic will be passing through the Sonciwall all the time, so throughput needs to be considered. If the 10 users are doing heavy graphics or engineering, and up and down loading may files, this might be an issue requiring a faster Sonicwall. If they are just "normal" business type users, it should not be an issue.
0
 
LVL 9

Author Closing Comment

by:dmessman
ID: 39216125
excellent, complete answer to my question
0

Featured Post

Retailers - Is your network secure?

With the prevalence of social media & networking tools, for retailers, reputation is critical. Have you considered the impact your network security could have in your customer's experience? Learn more in our Retail Security Resource Kit Today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question