Link to home
Start Free TrialLog in
Avatar of wjlloyd
wjlloyd

asked on

Practical VPN Setup

I have several folks that use Android Phones/Tablets.  Our service provider is Verizon Wireless.  Our users currently sync their email with our internal Exchange server.  I'm trying to find a way to reduce the external exposure to our Exchange server.  One way that occurred to me is to setup a VPN server, like OpenVPN.  However, it has to be pretty seamless to our users or they will reject it outright, including the owner of the company.  Does anyone know of a VPN solution that can operate "seamlessly" on these phones?  I will need a iPhone/iPad and Windows PC solution, as well.  

Thanks
Bill
Avatar of John
John
Flag of Canada image

If you use Outlook RPC/HTTPS, you do not really need VPN at all. That is probably the most seamless way and the way we do this at our clients. This is for Outlook/Exchange and not for folder sharing, for which you may need VPN.
Avatar of wjlloyd
wjlloyd

ASKER

That is what we are doing as well.  However, to do so, we have to expose the Exchange server to the entire Internet on port 443.  My preference would be to not have the Exchange server exposed on any ports.  With a VPN connection, I'm in control of who/what connects to the network and then who/what attempts to connect to my Exchange server.  I'm trying to add one more layer of security.
I have not needed VPN for Outlook in a decade. Done to Microsoft standards, it is very secure.

To add VPN is NOT transparent. I use VPN a lot. For computers I use NCP Secure Entry because it traverses double NAT. We do not need VPN for smart devices at this point, but that is yet another solution.

VPN is complicated and solutions are fairly complex a well. There is no one simple brainless solution that fits all.

I leave it to you, but I think Outlook is fine by itself. We do have clients using Outlook this way on smart devices.
Avatar of wjlloyd

ASKER

What does the NCP product cost you per workstation?
NCP is about $100 per user - less in volume. But it is SO good that management at my clients prefer it. It handles any location circumstance we have thrown at it. On computers, it is very easy to use - but not brainlessly transparent.
Avatar of wjlloyd

ASKER

Is that a one time cost or re-occurring?  Have you tried it on a smart phone?  What made you choose that product?
SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Avatar of Qlemo
Qlemo
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
@wjlloyd - Thanks and I was happy to help.