Any VPN solution for iPhone/iPad? NO JB

[trans_lux]

Hello
Been away for awhile and wanted to check in and see if there was any movement on a vpn solution for iPhone or an iPad that does not require a jail break. Without this UT is still d.o.a. for us and I'm sure many others.

thx
tl

[dmorris]

You'd have to ask here:
http://www.apple.com/support/

Of course, you know what they'll say - they aren't going to allow tethering apps in the app store as it will break their agreement with providers.

[johnsonx42]

I though iOS 5 was supposed to finally have a framework to allow 3rd party VPN clients? same with Android 4 ICS?

edit: ah, I see, the framework does exist, but Apple still won't let anyone but Cisco and Juniper use it. Nice.

[sky-knight]

Of course if you give Apple the finger they deserve, you're free to download apk's for Android outside of the app store and get the apps you want anyway.

Freedom, it's a good thing.

[trans_lux]

Its not me its my clients they all have iphone's and now iPads with LTE.
Their request to securely connect back inside the newtwork is not unreasonable.
Any work arounds other than another box behind UT?

We love UT but want a single box solution that can support our clients needs.
And with the introduction of your appliances it is even more attractive.

From the apple support site:
iOS works with VPN servers that support the following protocols and authentication methods:

L2TP/IPSec with user authentication by MS-CHAPV2 Password, RSA SecurID or CryptoCard, and machine authentication by shared secret.

PPTP with user authentication by MS-CHAPV2 Password, RSA SecurID, or CRYPTOCard. Cisco IPSec with user authentication by Password, RSA SecurID, or CRYPTOCard, and machine authentication by shared secret and certificates. Cisco IPSec supports VPN On Demand for domains you specify during device configuration.1

Juniper Junos Pulse and Cisco AnyConnect, using the appropriate VPN app from the App Store. VPN On Demand is supported for domains you specify during device configuration.2

iOS can use certificates in the following raw formats1:

PKCS#1 (.cer, .crt, .der)
PKCS#12 (.p12, .pfx)

[jcoehoorn]

If you've already got a windows server somewhere you can just host the vpn there and forward the needed port through untangle. You don't necessarily need to add an additional box anywhere.

[trans_lux]

If you've already got a windows server somewhere you can just host the vpn there and forward the needed port through untangle. You don't necessarily need to add an additional box anywhere.

So many of our clients are moving away from Win Server/Exchange/Office and using Google Apps or MS Office 360.
However our strategy is to find an open source solution.
Also Windows 8 server looks interesting as well.

Have not found the right one yet but I guess most have VPN implementations.

So far we have running:

• Zentyal
• SME Server
• Clear
• Igaware
• EdgeBox

Anything else to look at?

[sky-knight]

Zentyal has a PPTP plugin

[trans_lux]

Zentyal has a PPTP plugin

Its also a competing UTM

Am I the only one who sees the lack of IOS remote access a massive missing aspect of UT?
Sure we could use another box or a remote desktop app-Splashtop, Ignition etc. but its not the same and requires an up and available desktop.

One of our largest clients, an architectural firm has eliminated desktops for everyone save for a couple of the hardcore CAD/3D users. Everyone else is mac air or the majority are iPhone and new iPad aka iPad 3.

This is certainly not a fad as we are in discussions with several other clients that want to do the same thing.

I think one of the liabilities that is inherent with understanding how things work and what is under the hood so to speak put us at a disadvantage as we know too much.

Out clients don't care about anything other than
Can I do what I want when I want with as little effort as possible.

And please understand I'm the farthest thing from a MAC fan boy but it doesn't matter.
As I preach in our organization we are not our clients. Understanding this difference is a key element of success.

I know PPTP is not ideal but its certainly better than port forwarding.
Bottom line is for us and I'm sure many others is we need a simple VPN solution for the majority of our clients who largely are using or moving to IOS.

[sky-knight]

Does your architectural firm have a windows server floating around?

The PPTP engine on Windows Server is as point and click as you get, and requires nothing but a single port forward to work.

Untangle doesn't have to do "everything".

And yes, I'd like a PPTP option for Untangle too, but there are so many ways to get it on a network without Untangle doing the work that it's never been a huge pressure point for me.

If you want to be annoyed at someone, how about being annoyed at Apple for not providing open access to their VPN API?