SSL VPN Package

Hi papa_,

Not sure it is possible by the Rest API (maybe the config file, not an API guy tbh).

But you can do it from the gui by going to Definitions & Users > Users & Groups and on the users tab, select the checkbox of the user you want to download for then at the top of the section there is a dropdown that you can download the package from like below:

I wouldn't recommend downloading multiple at once, it gets a bit of a faff having to remove manually the ones you don't need.

Hope that helps!

Emile

We just do it by GUI

Hello Papa_,

What difficulties are you suffering from the GUI method where an API might help?

Emile

GUI download in our computer deployment script?

Hi Papa_,

SSL VPN is meant to be a User self managed system and was never designed to be part of a larger deployment methodology.

I would recommend looking into L2TP Clientless VPN as that can be deployed using GPO and deployment scripting.

Emile

Sorry, I only asked if it is possible to download the package via Rest API.

Sorry, I only asked if it is possible to download the package via Rest API.

Hello Papa_,

Unfortunately I believe, from documentation, you can only use the RestFul API for creating and configuring SSL VPN policies and not for downloading the SSL VPN configuration files.

The alternative is to download every users SSL VPN configuration file, host it on a network share then then use deployment scripts to deploy the appropriate VPN configuration to the user by doing a user to filename string match (filename includes the NETBIOS uName of the user). This can be done by powershell but is the only other alternative unless you move to clientless via L2TP which can be set up as part of the MDT to connect to the UTM and just use the logged on users credentials for access.

In future, please be more descriptive in your original question so to prevent misunderstanding and suggestions outside of your required scope.

Emile

What is not clear in

"Is there a way to download an SSL VPN Package via Rest API?"

An answer "Yes" or "No" would have been enough

Hello Papa_,

There is no requirement for that attitude.

If something is not possible, alternative suggestions can help with workarounds for issues that you may not have thought of or for other users coming across this thread.

As the question is now answered adequately, I hope the suggestions for alternatives work well for you.

Emile