Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSHL/SSLH - tunnel ssh over ssl

Hi,

As my first post, I feel obligated to say what a fantastic solution ASG is for me. 

I am a home user, and so i'm an not surprised that I didn't find any specific answers to the following question, as its unlikely businesses would need or want this function. 
However, I do need to tunnel SSH over SSL in some scenarios so that I can access my home equipment from work which appears to block SSH traffic on any port.

Due to way that an SSH connection starts compared to SSL its very easy to detect a SSH connection on port 443. I used to achieve this with HAPROXY running on my webserver. However, now that I've moved to ASG - I really like having that control in a central space and to make use of ASG's webserver protection.

The is the only feature I've not yet been able to implement in ASG, so my first assumption is that it is possible - i've just missed something.
Or perhaps, it requires a custom rule outside of the webadmin interface.

Please give me some insight on this - (i need it working for tomorrow! [:O] )

Best,

Andy


This thread was automatically locked due to age.
Parents
  • Hi, I'm not really sure how you were doing this before, but have you looked at the SSL VPN service/client in the UTM?

    Barry
  • Hi, I'm not really sure how you were doing this before, but have you looked at the SSL VPN service/client in the UTM?

    Barry


    This!  The simplest thing to do is implement a proper VPN.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • Hi, I'm not really sure how you were doing this before, but have you looked at the SSL VPN service/client in the UTM?

    Barry


    This!  The simplest thing to do is implement a proper VPN.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data