Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Download SSL VPN user config

Hello,
is it possible download the "vpn ssl package" user config via command line?
i have to schedule the download of the config for all user one time a week.

Thanks for your help.


This thread was automatically locked due to age.
  • is it possible download the "vpn ssl package" user config via command line?
    Not in a supported way, but you can from Webadmin at Definitions & Users > Users & Groups > Users > Action dropdown.

    If you have a paid license, be aware that usage from the shell is unsupported and may violate your warranty and support agreement.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • Hello, 
    from webadmin i only can donwload the config one at time for each user.

    I'd like download all the users config all at once and schedule this job.
  • Hi, Paolo, and welcome to the User BB!

    There are ways to make this easier, but we don't know how well you understand how the SSL VPN (OpenVPN) is installed or anything about the rest of your environment.  Have you already synced the VPN users with a prefetch from Active Directory?  Have you configured the User Portal so the users can setup the SSL VPN themselves?  How many VPN users do you have?  How many do you expect to be connected via the SSL VPN at the same time?  Which Sophos appliance do you have?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hello,
    the users are 139, they have already been created locally on the sophos sg 230.

    The goal is distribute the vpn package to the user's pc with  their personal configuration.



    Thanks
  • Hello, 
    from webadmin i only can donwload the config one at time for each user.


    Select all users from Webadmin (checkbox left to Action column), and then Action -> Download SSL VPN packages.
  • ThankYou Vilic, it works.

    My customer want schedule this task. Is it possible?
  • Just curious...what is the point of scheduling that task ?
  • You're right. I have not yet figured out why he want schedule this task........
  • Have you looked at "openvpn_generate_client_package" and "openvpn_generate_users_client_package" with confd-client.plx (aka cc)?  

    You probably need to go RAW to get to them interactively and massage the output to get something useful.



              'openvpn_generate_client_package' => {
                                                     'class' => 'info',
                                                     'deny' => undef,
                                                     'doc' => '
    SYNOPSIS: Create an openvpn client package for a given user.
    ARGUMENTS: 1 - Reference to an user object
               2 - Client package type [client-config|config-exe|config-zip|config]
    RETURNS: * Success: Gateway hostname and client package data (HASH REF).
             * Failure: undef
      ',
                                                     'module' => 'Info:[:$]penvpn',
                                                     'rights' => [
                                                                   'SUPERADMIN',
                                                                   'READONLY'
                                                                 ]
                                                   },
              'openvpn_generate_users_client_package' => {
                                                           'class' => 'info',
                                                           'deny' => undef,
                                                           'doc' => '
    SYNOPSIS: Create a ZIP file containing openvpn client packages of given users
              or groups and a CSV file containing users name, real name and primary
              email address.
    ARGUMENTS: 1 - An array of references to user and group objects
               2 - Type of client package [client-config|config-exe|config-zip]
    RETURNS: * Success: ZIP file containing client packages and a CSV file.
             * Failure: undef
      ',
                                                           'module' => 'Info:[:$]penvpn',
                                                           'rights' => [
                                                                         'SUPERADMIN',
                                                                         'READONLY'
                                                                       ]
                                                         },