Tutorial: Enable device posture check for Linux OpenVPN client

Abstract

Shows the steps to enable openvpn3 client to pass device posture attributes to CloudConnexa.

Shows the steps to enable openvpn3 client to pass device posture attributes to CloudConnexa.

Overview

In order for CloudConnexa Device Posture Policy checks to work, the client needs to pass device attributes to CloudConnexa. To enable the openvpn3 client on Linux to pass these attributes, additional setup needs to take place. To learn more about the openvpn3 client and the commands being used, refer to Tutorial: Learn to install and control the openvpn3 client.

Setup

Follow the steps below:

1. Install the required OpenVPN packages. Depending on your Linux distro, use one of the following commands:

   sudo apt install openvpn3 openvpn3-addon-devposture openvpn3-dpc-openvpninc
   sudo yum install openvpn3-client openvpn3-addon-devposture openvpn3-dpc-openvpninc

2. Reboot.

3. Import your VPN configuration profile. Replace $path-to-config with the path to your OpenVPN configuration file (e.g., /path/to/your/config.ovpn).

   openvpn3 config-import --config $path-to-config --persistent --name CloudConnexa

4. Enable Device Posture Check for the imported profile.

   openvpn3 config-manage --config CloudConnexa --enterprise-profile openvpninc

5. Start your VPN session.

   openvpn3 session-start --config CloudConnexa

Related Resources

Tutorial: Learn to install and control the openvpn3 client.

Device Posture