What's wrong with just installing the OpenVPN server and UFW on a standard Ubuntu server? It isn't a traditional security gateway or full-fledged "appliance" like what you might be used to, but it gets the job done very well with minimal overhead.
Both UFW and OpenVPN are very easy to set up (see the links), though they do require a specific (but fortunately, common) configuration.
For example, the firewall installation on a standard server will only protect the server itself, not the network as a whole. If you want this full protection, you will probably need an enterprise gateway of some sort. You will, however, need to discuss this with your IT team to find a solution that will fit your company's requirements.
Starting with UFW, most Ubuntu servers will already have this installed on them. If not, run this command:
sudo apt install ufw
UFW at its core is pretty simple to use. To allow SSH, HTTP, and HTTPS for example:
sudo ufw allow 22
sudo ufw allow 80
sudo ufw allow 443
This will take effect when you run sudo ufw enable
. Unlike iptables
, these rules will persist through a reboot.
OpenVPN is far more complicated. I would highly advise you read the above-linked post, as it dives very deep into all of the configs that you will likely need to touch. There are many guides available online if that one doesn't work. Either way, to install it:
sudo apt install openvpn-server
A sample config file is available at /usr/share/doc/openvpn/examples/sample-config-files/client.conf
, and can be played with to your heart's content. As it's a service, you'll need to restart it (systemctl restart openvpn.service
) on any changes to the real config under /etc/openvpn
.
It is also important to note that the act of just installing OpenVPN on a server is not enough. If your company network is common, your server will be hiding behind a NAT and you will need to have your IT department set up a port forward for this server so that you can access it from the world. In this case, be sure to test and set up any relevant security/firewall systems before exposing the server to the Internet.
iptables
. See this DigitalOcean article. As for OpenVPN, it comes in a client and a server mode. See here. These aren't like physical boxes or other hardware appliances/devices. They're apps that anyone can install on any Ubuntu server. If you want a router or security gateway, that's a different (and more complicated) matter.