combe

Dear Jeff,

OpenVPN can not be installed until Stormshield SSL VPN is installed because the OpenSSL Daemon is enabled with the Stormshield Client installation and OpenVPN can not be installed until an OpenVPN instance is active.

The solution is to use OpenVPN binaries built into the StormShield client.

The second advantage of this technique is that it can continue to use the stormshield client address book which can not be used with just the OpenVPN client.

The 3rd advantage of this technique is that in the case of an update or reinstallation of the Stromshield SSL VPN, no setting is lost. The installation of stormshield client is particularly well done, it loses no adjustment and if an old version is present, it uninstalls it properly before settling in turn. These reinstalls (or updates) must be done quite often because of updates of windows 10 that disrupt the proper functioning of the client StormShield (reset some parts of the network layer). It should be noted that the OpenVPN client is in the same case against Windows 10.

The OpenVPN binaries set up by the StormShield SSL VPN client installation are located here:

C: \ Program Files (x86) \ Stormshield \ Stormshield SSL VPN Client \ OpenVPN \ bin

the binaries in this directory are as follows (with v2.7.0.0):

libeay32.dll

liblzo2-2.dll

libpkcs11-helper-1.dll

msvcp110.dll

msvcr110.dll

openvpn.exe

openvpnserv.exe

ssleay32.dll

The last version of the client for your test is available here.

The SHA of the executable is 63270570485282e6229a494accf3446fc40f6b3204ec1f5c62c4d4cb4b679426

I will put you at your disposal a VPN server during your tests when everything will be ready.

Regards.

I just got in touch with the stormshield support and the Stormshield client is a graphic overlay to the OpenVPN client.

So you have to use the Open VPN client built into RDM and fill in the fields correctly. The location of the certificates is in the following directory:

C: \ Users \% user% \ AppData \ Local \ Stormshield \ Stormshield SSL VPN Client \ config

and the directory contains these files:

CA.cert.pem

default.ca.crt

default.client.crt

default.client.key

openvpn_client.ovpn

openvpnclient.cert.pem

openvpnclient.pkey.pem

With this information Devolution could redo a copy of the openVPN interface adapted to connections on Stormshield (and simplified)?

I specify that in stormshield client SSL VPN, there are not many options, just the name of the server or its IP, the port, the username and the password.

No, no progress on this point.

I am now using version 2.6.0 of the stormshield SSL VPN client in manual mode before each connection. I regret that Devolution does not look into the full integration of this VPN client.

Hi,

A way to open the web connection in external mode (work fine) but in "open a new private windows", like this, it's possible to open multiple instance at the same time...

Thank's

Hi,

No, I don't know to do this... For the moment, I use the STORMSHIELD VPN SSL Client v2.1.0.0 in manual mode befor connecting with RDM.

But I think the stormshield client use the openvpn client in background... But I do not know enough to get a run OpenVPN client with StormShield.

:-(

Hello,

We use before in many of our customers equipped with NETASQ / StormShield box the VPN ShrewSoft. We now use the "SSL VPN Stormshield".

Would it be possible to have an add-on that manages this type of VPN Client?

https://www.stormshield.eu/

http://documentation.netasq.com/firewall/guide/v2/en/Default.htm#gde/snengde_firewalluserguide-v2/ssl_vpn/ssl_vpn.htm%3FTocPath%3D_____39

Thank's.