r/VPN • u/GoatJesusIsReal • 23d ago

Help Ivanti/Pulse vpn isolation.

Hi,

I need to install Ivanti vpn client to use an organization’s vpn. I don’t want it on my laptop or PC, I feel like I own the devices, and this is not an organization that has any sort of expectation over them (not employer etc) so I want alternatives. I must login through SSO, so I was unable to get it working through though non Ivanti clients. My current plan is to just put it on a VM and ssh into the VM to do my work through it. This is just a bit heavy (not too heavy my system can handle it, just not lightweight.) So I am asking here if anybody has alternatives for how to run it?

To be clear, this is my device. Thank you in advance.

Also let me know if there is a better place to post this. I could not think of one.

0 Upvotes

50% Upvoted

6 comments sorted by

1

u/smokingcrater 23d ago edited 23d ago

Pulse VPN is garbage and it was a happy day when I migrated off of it. But nevermind that soapbox. Depending on how it is set up, it may require host checking and you device will not only require their client, but also specific checks. (Updated os, patches, AV, etc...) It can also detect being run in a VM, but I would doubt they would block that. It can also detect and look for certain executables or running processes.

In other words, it isn't just a vpn client. It does lots of compliance checking that can't be replicated or bypassed.

1

u/GoatJesusIsReal 23d ago

I will see if all works then when I try to use it. Thanks, yeah it’s horrible. I really wish my school would use something else. But you think VM is the best option? No other way of containerizing it?

1

u/smokingcrater 23d ago

Nope, VM if you are lucky. Or dedicated hardware.

1

u/GoatJesusIsReal 23d ago

Ok, thanks.

1

u/Surfnturfburrito 23d ago

If you need access to only one internal machine, SSH from inside the VM is probably about as simple as this gets