Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I've been looking for a while but I'd like to to implement a vpn solution for anywhere from 1-5 employees at a time (possibly 10 in a year or so)

edit:

Basically I would like outside users to fire up a client or open a web page and be able to access things inside the company network (share drives / printers/ webapps /etc)

I've looked at Astaro Gateway but im not sure if that's the right tool for the job.

I know "best" is a subjective term so i would like to break it into to different suggestions

1) what is the cheapest solution given the criteria above

2) what solution will result in the least amount of headaches from the point of view of maintenance and learning curve.

share|improve this question
    
A VPN to what? What things to they need to access? –  Zoredache Jun 8 '10 at 20:05
3  
Also, please consider revisiting some of your older questions. Mark things as accepted if you have received a useful answer, or add comments or revise your questions with any additional details so we can get more of your questions resolved. –  Zoredache Jun 8 '10 at 20:06
    
What's your environment like? Windows workgroup? Domain/Server (SBS)? –  gravyface Jun 8 '10 at 20:16
    
Windows mostly with a unbuntu 8.04 ltr running samba for share drives and our pdc –  Crash893 Jun 8 '10 at 20:28
    
What firewall protects this little network from the big bad internet? –  tomjedrz Jun 8 '10 at 23:34

3 Answers 3

up vote 2 down vote accepted

I recommend Astaro without reservation. It isn't free, but it is inexpensive. It uses the open source package OpenVPN for both IPSec and SSL VPN connectivity. The Astaro management interface is quite clear, and deploying the VPN is straight-forward. Plus, you get a very good firewall along with the VPN.

Q1 (Cheapest): Rolling your own is inexpensive if your time is considered free. If you are familiar with Linux, OpenVPN server is the "market leader". Windows can be a VPN server with no additional software on the server or on Windows clients, but I have never used it and would hesitate to because of my unwillingness to expose Windows to the internet.

Also, a similar question has an interesting answer .. flash the router with dd-wrt, an open source firmware that includes OpenVPN. Note that I recommended Astaro there as well!

Q2 (Least Headaches): Astaro is really easy to manage. I have also used Cisco and SonicWall VPNs and found them more difficult for the users and to administer. And, an Astaro appliance will be deployed and running in a tiny fraction of the time it will take to roll your own, or even to flash a router!

I think my opinion is clear!

share|improve this answer

If you have skilled systems/network admins certainly OpenVPN can be the solution you are looking for. It will require the users to be provided with a certificate and a small client to be run on their clients.

One the certificates are created there is no maintenance needed during the product lifetime.

OpenVPN is free and well known, you could run a hardened, Linux box to host the server.

Don't forget the security aspects of having user connecting externally to your network.

share|improve this answer
    
Small business so unfortunatlt SF is my skilled system/network admin I'm a programer that took a job as "the it guy" –  Crash893 Jun 11 '10 at 1:53

For simplicity sake, my vote goes to pfSense: it's a great open source firewall, can run on an older desktop like a champ, and has a great community. It's my new firewall of choice for small business clients. For simplicity, you can buy it on ALIX hardware from NetGate, but if you have a spare machine, get another NIC and you're all set.

share|improve this answer
    
I'll have to check this out .. –  tomjedrz Jun 10 '10 at 5:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.