wayneinuk
asked on
VPN - Office to Cloud
Hi,
I have a bare metal server and a VPS in one of the well known UK data centres running CentOS 7. The bare metal server runs some ERP software that is accessible via a web browser (using SSL of course) however there is still the occasional use of an old client-side application that uses the telnet protocol to talk to the ERP system/server as well as printing requirements - Linux to networked IP printers on the LAN.
I would like to use a hardware firewall in offices with either a VPN gateway running in the cloud or perhaps on the bare metal server running CentOS7.
Can anyone please advise me on the best way of achieving this?
Thanks
I have a bare metal server and a VPS in one of the well known UK data centres running CentOS 7. The bare metal server runs some ERP software that is accessible via a web browser (using SSL of course) however there is still the occasional use of an old client-side application that uses the telnet protocol to talk to the ERP system/server as well as printing requirements - Linux to networked IP printers on the LAN.
I would like to use a hardware firewall in offices with either a VPN gateway running in the cloud or perhaps on the bare metal server running CentOS7.
Can anyone please advise me on the best way of achieving this?
Thanks
ASKER
Hi,
Thanks for the reply but no it is built into the application and I also need Linux to printer support using print note or lose printing.
Thanks for the reply but no it is built into the application and I also need Linux to printer support using print note or lose printing.
ipsec is available for native linux. (Used by the many linux based firewalls).
The big ones are: libreswan & strongswan. Both stem from FreesWan.
Libreswan went l2tp & extending support for it.
Strongswan started with x509 certificates as authentication ...
Both grew to a more common featureset now, and both are more or less on par now
The big ones are: libreswan & strongswan. Both stem from FreesWan.
Libreswan went l2tp & extending support for it.
Strongswan started with x509 certificates as authentication ...
Both grew to a more common featureset now, and both are more or less on par now
ASKER
Ok, can it do the job I need and can you please me towards any documentation to the solution please?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
That is at least encrypted.
For windows there is putty for this.
(telnet, & ftp ) should be buried.... they behav like some kind of zombies rearing their head all the time.
For generic tunneling IPSEC would be the best choice.