Package: what-vpn
what-vpnIdentifies servers running various SSL VPNs. (They should really be called
"TLS-based" VPNs, but "SSL VPN" has become the de facto standard jargon.)
Currently it can recognize…Cisco AnyConnect andOpenConnect (ocserv)Juniper Network Connect/PulsePAN GlobalProtectBarracuda NetworksCheck PointMicrosoft SSTPOpenVPNFortinetArray NetworksF5 BigIPSonicWall NX (spin-off fromDell)Aruba VIAH3CInstallRequires Python 3,pip, andrequests:$pip3installhttps://github.com/dlenski/what-vpn/archive/master.zip
...
$what-vpn
usage:what-vpn[-h][-k][-tSEC][-v|-c]server[server...]what-vpn:error:thefollowingargumentsarerequired:serverExamples$what-vpnvpn.colorado.eduvpn.northeastern.edu\vpn.tnstate.eduvpn.smith.eduvpn.caltech.edu\vpn.yale.eduvpn.drew.eduvpn.uca.eduvpn.simmons.edu\vpn.nl.educpvpn.its.hawaii.edussl-vpn.***.com\viavpn.luther.edu
vpn.colorado.edu:AnyConnect/OpenConnect(Cisco)vpn.northeastern.edu:PANGlobalProtect(portal)vpn.tnstate.edu:PANGlobalProtect(portal+gateway)vpn.smith.edu:JuniperNetworkConnect
vpn.caltech.edu:AnyConnect/OpenConnect(Cisco,ASA(9.1(6)6))vpn.yale.edu:AnyConnect/OpenConnect(Cisco,ASA(8.4(5)))vpn.uca.edu:Barracuda(2017)vpn.simmons.edu:CheckPoint(2015,20%)vpn.nl.edu:CheckPoint
cpvpn.its.hawaii.edu:CheckPoint
vpn.***.com:ArrayNetworks(40%)ssl-vpn.***.com:nomatch
viavpn.luther.eduArubaVIA(80%)$what-vpn-kvvpn.***.com

Sniffing***.***.com...IsitAnyConnect/OpenConnect?ocserv,0.8.0-0.11.6IsitJuniperNetworkConnect?nomatchIsitPANGlobalProtect?nomatchIsitBarracuda?nomatchIsitCheckPoint?nomatchIsitSSTP?nomatchIsitOpenVPN?nomatch=>AnyConnect/OpenConnect(ocserv,0.8.0-0.11.6)Interesting resultsAn interesting question for the open source community, including the indispensableOpenConnect(which I also contribute to) is…What are the most commonly-used SSL VPN protocols in the real world?2019 resultsIn April 2019, I took a list of major universities and companies in the USA, and
generated some guesses for the hostnames of their VPN endpoints
(e.g.{vpn,ssl-vpn,sslvpn}.*.{edu,com}). I then usedwhat-vpnto probe them all
and looked at the subset of the results that matched to an identifiable SSL
VPN protocol:1  Check Point
  1  Citrix (manually inspected, don't know how to reliably autodetect)
  1  OpenVPN
  5  Dell or SonicWall (manually inspected, didn't know how to reliably autodetect at the time
  7  Fortinet
  7  Barracuda
  8  F5 (manually inspected, didn't know how to reliably autodetect at this time)
 14  SSTP
 53  PAN GlobalProtect (portal and/or gateway)
 72  Juniper Network Connect (or Junos/Pulse, hard to distinguish)
243  Cisco AnyConnect (including 1 ocserv)Assuming these results are roughly representative of “SSL VPN” deploymentsin general(at least in the USA), they show that OpenConnect already supports
the top 3 most commonly-encountered SSL VPN protocols, or about 80% of SSL VPNs.
Additionally Microsoft SSTP is supported by the open-sourcesstp-client,
and of course OpenVPN is well-supported by open-source clients as well.(Excerpted fromthis post on the OpenConnect mailing list)2021 resultsI repeated this analysis in February 2021 (after having implemented F5, SonicWall NX, and Array Networks sniffers, and
having improved several others). This time, I expanded the pool of names to include{vpn,ssl-vpn,sslvpn,remote,vpn2,new.vpn,access}.*.{edu,com}. Here are the 2021 results for servers that matched to
an identifiable SSL VPN protocol:1  Array Networks
  4  Barracuda
  4  Check Point
  6  SonicWall NX
  8  OpenVPN
 14  SSTP
 21  F5 BigIP
 29  Fortinet
 83  Pulse Secure (most also support the older Juniper protocol)
103  PAN GlobalProtect (includes 7 servers that behave in a slightly odd way)
298  Cisco AnyConnect (no ocserv found this time)We've recently added support in OpenConnect forFortinet and F5
BigIP(with support for SonicWall NX coming soon). Combined with AnyConnect, GlobalProtect,
and Pulse/Juniper, this means that OpenConnect now supports 5 of the most highly-used
SSL VPN protocols.Assuming again that these results are roughly representative of “SSL VPN” deploymentsin general(at least in the USA). That means that OpenConnect now supports almost
93% of SSL VPNs in real-world use.TODOIdentify non-SSL/TLS-based VPNs? (e.g. IPSEC, à laike-scan)Identify more SSL VPNs: Citrix… any others?Fix apparent false-negatives for some SonicWall/Dell serversIdentify specific versions or flavors of VPN servers?Better confidence levels?LicenseGPLv3 or later