fwiw, My company uses a commercial VPN client, along with an app called "Clean Access Agent", which allows them to connect to the VPN, and then if they pass the agent policies, they will be allowed into our networks. If they don't pass, they will only be allowed access to the patch and a/v servers so they can pull updates.
The policies basically require that the PC has a known anti-virus app running, and perhaps has recent OS patches. We've had to create exclusions for users on Macs and Linux as there doesn't seem to be an agent for them.
Perhaps there is a way to setup something like this with OpenVPN?
fwiw, My company uses a commercial VPN client, along with an app called "Clean Access Agent", which allows them to connect to the VPN, and then if they pass the agent policies, they will be allowed into our networks. If they don't pass, they will only be allowed access to the patch and a/v servers so they can pull updates.
The policies basically require that the PC has a known anti-virus app running, and perhaps has recent OS patches. We've had to create exclusions for users on Macs and Linux as there doesn't seem to be an agent for them.
Perhaps there is a way to setup something like this with OpenVPN?
