ProxymanApp / Proxyman

Modern. Native. Delightful Web Debugging Proxy for macOS, iOS, and Android ⚡️
https://proxyman.io
5.49k stars 180 forks source link

Pulse Connect Secure VPN with Proxyman : working solution #1203

Open florentmorin opened 2 years ago

florentmorin commented 2 years ago

I tried official process from Proxyman Documentation but it won't work.

So, here is my solution, with a very highly secured VPN.

First, you need to install OpenConnect.

brew install openconnect

You need to obtain installation path for openconnect.

whereis -b openconnect

After that, don't forget to edit /etc/sudoers

sudo visudo -f /etc/sudoers

Add this line and replace <openconnect-binary-path> with your binary path.

%admin  ALL=(ALL) NOPASSWD: <openconnect-binary-path>

Now, you can connect to your secured proxy using Juniper SSL / Pulse Connect Secure protocol.

 sudo openconnect --protocol nc -u <username> <proxy-url>

Once connected, launch Proxyman and it will work like a charm.

NghiaTranUIT commented 2 years ago

Thanks @florentmorin. I added your suggestion to our official Doc at https://docs.proxyman.io/troubleshooting/proxyman-does-not-work-with-vpn-apps#4.-pulse-secure-and-global-protect-vpn

Thanks again for your contribution. I appreciate it 👍

VaslD commented 2 years ago

I vote against editing sudoers, especially against putting it in a tutorial.

That step is useful (i.e. good to know) but not necessary. It also comes with security responsibilities (and, to most who needs a step-by-step VPN tutorial, security risks), because after editing sudoers, running openconnect still elevates to root but no longer requires admin password. That step should only be included in a section that has a big yellow exclamation mark at best; or removed altogether from the tutorial.

IMO a tutorial for a tool should not include a section that bypasses standard system security features, even if it's about using a built-in system tool to do so.

NghiaTranUIT commented 2 years ago

Thanks. I will add a note to the Doc 👍