SSL VPN for Mac

[bwmillslg]

Are there any plans or a timeline for an SSL VPN client for Apple Mac?

[nrice · Accepted solution]

Hello,

Support for SSL VPN on the Mac is slated for the end of this year.

[bwmillslg]

Good thing I only have 1 Mac user that needs remote access, then!  We're using VNC as a workaround, I wonder if there is an IPSec method to connect him?

[nrice]

You may have found the best workaround using the VNC.  We don't support an IPSec client for remote users. 

[dbridges]

just been released in PANos 3.1.4 and version 1.2 of the ssl vpn client...

still testing right now, but at least its a start....

[rob]

I found out it is really there for OSX, but on my MacBook Pro (64 bit) I get an error that the NetConnect cannot install.

Is there some JAVA issue blocking it?

[mharding]

It's not available until the end of the year.

[James]

Hi There,

Just to clarify - MAC OS-X Support is indeed there in PANOS 3.1.4 and SSL VPN Client 1.2.0 as stated above.  The kernel currently supported is 32-bit.  64-bit support will be a future enhancement.                

[dbridges]

it's out now...you need to be running 3.1.4 od PANOS and the 1.2 version of the SSL client.

works fine..

the "gui" from the icon you get on OSX that sits in the menu bar sometimes gives some funny output lik e its no connected, but it is actually, so test connectivity rather than relying on what the netconnect client says.

I'm a root user on my laptop, so I haven't had any issues installing..

[dbridges]

just to clarify.... as i missed that bit in your earlier post...

i am NOT running 64bit kernel and extensions...

[dbridges]

doesn't work if you install it in 32-bit and then flip to 64 afterwards either...

you can change your mac to run with a 32 bit kernel pretty easily tho if you need to.... reboot and hold 3 and 2 as it boots....

[rob]

It is indeed really strange. NetConnect installs fine without any errors. But connecting is not working... it seems!

The NetConnect clients says it is trying to connect but disconnects because it can't get a local IP address from the client VPN pool. Not true!

It does get an IP, you can check it out on the PA under the "More Users Info" from the SSLVPN.

All security rules from zone SSLVPN are hit so there is connection.

When trying to connect to local resources, it works! But performance is really, I mean REALLY slow.

So there is still a lot of work to do.

Attached a part of the panlog.txt which is obtained from the TechSupport in the NetConnect client.