Solved

SSL VPN from a Mac to a Sonicwall TZ105 - what is required

Posted on 2013-05-28
4
1,021 Views
Last Modified: 2013-06-03
I have a client with a small network (10 machines on a 25 Mbps symmetrical fiber connection).  The client is Mac based and has requested the ability to VPN in from the outside.  

From what I can tell, I believe I can do this with the Sonicwall TZ105 and using the SSL VPN client built into the Mac (OS X 10.8).  I'd be using local accounts that I'd store/create on the Sonicwall itself.  I'm not a Mac expert, so I'd appreciate the advice of those who have done this before.  

Will the Sonicwall TZ105 do what I need?  Will it have what I need out of the box?  Do I need to add anything extra beyond what's in the box?

The goal of this process is to give access to LAN Mac desktops from users when they are at home.  

I'm much more familiar with PPTP VPNs whether they are hosted by a Windows server or another firewall endpoint.  

Thank you
0
Comment
Question by:dmessman
  • 2
  • 2
4 Comments
 
LVL 20

Accepted Solution

by:
carlmd earned 500 total points
ID: 39204989
The TZ105 is a UTM (firewall) device that will do what you want and a lot more. Do you really want a UTM device, or just an SSLVPN appliance?

The TZ105 comes with one SSLVPN license, and can support a maximum of 5. The additional licenses must be purchased.

In order to get up to 10 possible SSLVPN licenses you would have to purchase a TZ205. It comes with one SSLVPN and the additional can be purchased.

If you do not want/need a UTM (firewall) device, then you might consider the Sonicwall SRA1600 (Secure Remote Access), which comes with a 5 user SSLVPN license than can be upgraded to a maximum of 50.

Using the SSLVPN does not require you use any MAC clients. What you need locally will be downloaded on the first use.
0
 
LVL 9

Author Comment

by:dmessman
ID: 39207662
This perfectly answered my question.  

This might be the dumbest question after asked - but does an SSL VPN require an SSL certificate?  This will be important as I estimate costs.

Since the number of simultaneous VPNs will be minimal and the client will want to keep costs down, I'll probably go with the TZ105 and not the SRA1600, though that advice was extremely helpful.

Thanks
0
 
LVL 20

Expert Comment

by:carlmd
ID: 39207703
No, you do not require an SSL certificate to use the SSLVPN. All that is necessary is provided by the Sonicwall.

There is one more thing to consider. You mention 10 MACS on the network but not what they are doing. Keep in mind that all traffic will be passing through the Sonciwall all the time, so throughput needs to be considered. If the 10 users are doing heavy graphics or engineering, and up and down loading may files, this might be an issue requiring a faster Sonicwall. If they are just "normal" business type users, it should not be an issue.
0
 
LVL 9

Author Closing Comment

by:dmessman
ID: 39216125
excellent, complete answer to my question
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
adobe premier render 10 50
How to configure this IP Address to my firewall 15 105
DNS Server 7 26
Thoughts on PC Doctor 11 48
Do you come here a lot? Are you lazy like me and don't want to go through the "trouble" of having to click your Dock's Safari icon and then having to click your Experts Exchange Favorites bookmark to get here? Well then this article is for you.
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question