AlmostVPN

Donationware

Current Version: 1.5.3 (October 1, 2007)

AlmostVPN is an SSH tunnel management application "with a twist," as the authors like to say. AlmostVPN provides simple to use alternative to "real" VPN. It allows you to gain access to computers and services on your private network via single, secure SSH connection. Differentiating features include:

• It is packaged as Preference Panel, so you do not have to a standalone application to configure SSH tunnels.
• It employs launchd to control tunnels, so you do not have to have yet another application running while tunneling.
• It uses creative network configuration techniques to provide almost VPN like access to remote services, so you can keep using real IP addresses and port numbers while accessing service on the other side of your tunnels.
• It provides simple way to mount remote volumes via SSH tunnel.
• It can import tunnel definitions from SSH Tunnel Manager and SSHKeychain applications.

Version 1.5.3 adds/changes the following from version 1.5.2:

1. AlmostVPN was ignoring "Ask for password" option if SSHD server was configured to do "password" based authentication (as opposite to "keyboard-interactive")
2. Under some conditions Quick Configuration used to "dump" some passwords into System log file

AlmostVPN requires Mac OS X 10.4.x or better.

DigiTunnel

Commercial; $58

Current Version: 1.4.4 (March 23, 2006) / 1.5.1 (September 11, 2009)

Gracion Software (formerly One Click Systems) produces the DigiTunnel PPTP VPN (Virtual Private Network) client for Mac OS X, compatible with Windows 2000, WatchGuard, Nortel, OS X Server 1.2 and other VPN servers.

Version 1.4.4 - the latest version for Mac OS X 10.2 and later - adds/changes the following:

• Universal binary build - runs on PowerPC- and Intel-based Macs.
• Fixed case where DigiTunnel won't operate if Application Support/DigiTunnel folder was replaced by dragging or backup software.
• Special characters (&ccdeil;, §, etc.) in passwords could result in failed login.
• Localized in French
• Fixes installer problems on Mac OS X 10.3, and there is also a cosmetic fix to the uninstaller, primarily for Intel Macs.

Version 1.5.1 - the latest version for Mac OS X 10.3.9 and later - adds/changes the following:

• Bypassed packet length check causing problems for a customer.
• Fixed DNS issues in split routing mode that were introduced in 1.5.
• Added option not to warn about mounted servers when disconnecting.
• Non-admin users can register the software.

DynDNS Updater

Freeware

Current Version: 3.0 (January 8, 2010)

Written specifically for Mac OS X, and working in conjunction with the Dynamic DNS system at www.dyndns.org, DNSUpdate allows your computer to have a consistent domain name every time you connect to your ISP.

Version 3.0 introduced the following major enhancements:

• Internet Guide integration - set your DNS servers dynamically without interfering with VPN connections.
• Improved diagnostic email template with more useful information for troubleshooting.
• Reduced logging of non-warning messages by default.
• Fix for a version problem with the widget present in the beta release.

InterGate

Commercial; see text.

Current Version: 9.2.5 (February 17, 2009)

Vicomsoft produces InterGate (formerly Internet Gateway, and superseding Vicomsoft's SurfDoubler product), which allows multiple computers connected via a simple network connection to share a single Internet connection.

Pricing starts at $99 for a 5-user license, and tops out at $2,599 for a 2,000 user license.

Version 9.2.5 adds/changes the following:

• DNS fixes

IPSecuritas

Freeware

Current Version: 2.2 (October 4, 2006) / 3.4 (October 26, 2009)

Mac OS X includes everything you need to secure your communications using IPSec. Unfortunately, it's not as easy to use as it should be. IPSecuritas is a handy piece of freeware that lets you easily setup IPSec VPN connections to another host or network over the Internet, securing your data with encryption and authentication. IPSecuritas adds a graphical front-end to the built-in IPSec core, allowing you to setup secure communications within minutes. IPSecuritas interoperates with a large and daily growing number of VPN devices, including devices from popular manufacturers such as Cisco, Zyxel, Netgear and more.

Version 3.4 - the latest version for Mac OS X 10.3 or later - contains the following new functions:

• Added connection warning and error indication to menu bar item icon
• Added a traffic graph to the statistics window
• Dashboard Widget is now installed automatically when IPSecuritas is first run
• Visually vamped up Dashboard Widget
• Updated User Manual
• Added new HOWTO descriptions and updated others

IPSecuritas 2.2 remains available for Mac OS X 10.2 or higher.

No-IP

Freeware

Current Version: 3.0 (November 8, 2003) / 3.1.5 (March 31, 2010)

Similar to DynDNS Updater, but working in conjunction with the No-IP system at www.no-ip.com, No-IP allows your computer to have a consistent domain name every time you connect to your ISP.

No-IP includes two components:

• No-IP.com Update Client (Installed into: /Applications) - This graphical application is used to perform instant and scheduled updates to your No-IP hosts. It is also used to configure the UNIX Background Daemon.
• UNIX Background Daemon (Installed at: /usr/local/bin/noip2) - This faceless program can be configured to run in the background as a system service. It will automatically update the No-IP servers whenever your IP address changes.

Unlike DynDNS Updater, No-IP is not a Universal Binary, but it is available for "Classic" Mac OS.

While no information is available regarding what's new in version 3.1.5, version 3.1.3b3 made the following enhancements:

• Improved Daemon Functionality
• Standardized Drag and Drop Installer
• Utilizes New Logos
• And More

PiePants

See text.

Current Version: 1.0.0b3 (April 7, 2002)

PiePants is a PPTP client for Mac OS X. It supports encrypted communications for secure connections to your PPTP VPN. PiePants only supports a single PPTP connection at a time. Version 1.0.0b3 addresses the following:

• Fixed a problem with a case-sensitive comparison of authentication data.

The author notes: "I haven't yet decided exactly how I'm going to license PiePants, but most likely it will be as pay-if-you-like shareware for a small fee (say, $25). On the other hand, it appears from the Darwin CVS tree that there may be a PPTP client in the OS before too long, which would probably make PiePants obsolete. So who knows -- maybe I'll make it free, or open source it. I'd appreciate feedback from folks on whether or not they'd pay for it. For now, there are no limitations in the beta -- please use it and give me feedback, but please understand that this is sort of a side project for me and I may have some trouble providing quick support if you run into a problem."

PortReflector

Shareware; $10

Current Version: 1.2.1 (August 22, 2002)

PortReflector allows Mac OS X Classic applications to access the Internet using Mac OS X's native PPP connection. PortReflector is designed to accept TCP connections on a configured port and reflect them to another host or port number. This type of functionality allows Classic applications to communicate with the internet via Mac OS X's PPP connection. PortReflector is $10, shareware. Version 1.2.1 adds/changes the following:

• Fixed incompatibility with Mac OS X 10.2.

PPP Genie

Shareware; $12.95

Current Version: 1.1.1 (January 9, 2003)

PPP Genie is Mac OS X utility for controlling and monitoring your PPP connection. It allows you to easily open and close your connection, and keep track of the time and money you are spending online, either in a floating window or in your menu bar. It supports PPPoE and multiple configurations. Version 1.1.1 adds/changes the following:

• Fixes bug introduced in v1.1.0 which could cause PPP Genie to misread and corrupt the user's registration code, causing PPP Genie to behave as though the user had not registered (unfortunately, registered users must re-enter their registration code)

PPP Genie 1.1.1 has been tested and should be fully compatible with Mac OS X 10.3, "Panther."

Shimo

Shareware; €12.95

Current Version: 2.2.3.1 (July 7, 2010)

Shimo is an inexpensive VPN client for the Mac. Features include:

• Supports Multiple Services (Cisco, OpenVPN, IPSec, PPTP, L2TP, SSH...)
• Advanced Notification System (growl, AppleScript, Speech...)
• Secure Storage of Passwords in Apple's Keychain
• Automatic (Re-)Connection on Wakeup, Network-Changes, etc.
• Global Shortcuts for fast Connection/Disconnection

Version 2.2.3.1 adds/changes the following:

• Fixes a bug that could crash Shimo on launch.

Tango Access

Commercial; see site.

Current Version: 1.3 (February 20, 2004)

Siemens Subscriber Networks, Inc. (formerly Network TeleSystems and Efficient Networks) produces the Tango Access (formerly TunnelBuilder) secure remote access client that creates encrypted tunnels over the Internet using the Point-to-Point Tunneling Protocol (PPTP).

Tango Access version 1.3 will now support the new Mac OS X release, version 10.1.4 and higher, through its Installer component. The Tango Access Installer will prompt for a username and password, which it will configure in the Mac OS Remote Access configuration. You can then use the Mac OS native PPPoE component to make your connection. The Tango Access application is not installed on OS X. Future releases of Tango Access will inclue the Tango Access application, communicating over the Mac OS native PPPoE component. Tango Access for Mac supports all current versions of Mac OS starting 8.5 to the current 9.2.x releases.

Tango Access for Mac OS is available for purchase only in quantities of 1000 copies or more.

See the Tango Access for Mac FAQ for more information.

TunnelMate

Commercial

Current Version: 1.2

Powerlan USA, Inc. produces the TunnelMate SSH tunnel and client software for Mac OS X (Carbon). TunnelMate seamlessly integrates Secure Shell communications with products such as Powerlan's X Server product, WebTerm X and Powerlan's Terminal Emulator, WebTerm. The primary design goal of TunnelMate is to provide "full-service" Secure Shell communications without requiring users to run a separate shell application, as is necessary in other security solutions. TunnelMate may also be run as a stand-alone product, providing a Secure Shell console.

Viscosity

Shareware; $9

Current Version: 1.1 (July 22, 2010)

From the Viscosity web site: "Viscosity is an OpenVPN client for the Mac, providing a rich Cocoa graphical user interface for creating, editing, and controlling VPN connections. Viscosity provides a complete OpenVPN solution for Leopard (Mac OS 10.5) and does not require any additional downloads or software."

Viscosity includes the following distinguishing features:

• Cocoa Interface - Viscosity allows connections to be completely configured through a GUI, without any need to know how to use the command-line or OpenVPN's configuration file syntax.
• Leopard Support - Viscosity has been designed from the ground up for Leopard. Viscosity will run on any PowerPC or Intel Mac running Mac OS 10.5.
• Traffic Statistics - Viscosity monitors your OpenVPN connections to ensure you know all the details. The floating Details window will keep you up to date with IP addresses, traffic flow, and OpenVPN messages.
• Keychain Protected - Viscosity integrates with the Mac OS X keychain to make sure your VPN login details, certificate passwords, and proxy logins and kept safe and secure.
• Growl Notifications - Viscosity is built with Growl support to keep you notified about your VPN connection. Get alerts when the status of a VPN connection changes, including IP addresses.
• Automatic Updates - Viscosity integrates with Sparkle to provide seamless update checking and installing so you don't have to. And if you don't like update checking, it can be turned off with one tick.
• Enterprise Support - Easily pre-configure Viscosity so your users don't have to. Viscosity can be set up to automatically create VPN connections on first launch so users are good to go no matter their VPN knowledge.
• Also includes AppleScript control, DNS support, configuration importing, and much more.

Version 1.1 adds/changes the following:

• Full PKCS11 (token/smartcard) support
• Ability to run AppleScript scripts when a connection connects/disconnects
• IPv6 Support
• DNS servers/domains can be edited using the GUI
• Support for pushed WINS servers
• Connections can be duplicated
• Updated TUN/TAP drivers
• Greater controllability using AppleScript
• General editing enhancements
• Various bug fixes and enhancements

VPN Tracker

Commercial; see site.

Current Version: Client: 6.2.2 (June 16, 2010)

Equinux USA Inc. produces VPN Tracker, a tool for IPsec networking that helps you connect to VPN hardware and software with Mac OS X. The software is available for purchase in both "Professional" and "Personal" editions, as well as in a special "Player" edition.

Version 6.2.2 adds/changes the following:

• Added support for ZyWALL USG Series and ZyWALL 1050
• Updated configuration guides and device profiles for ZyWALL 2/5/35/70 and ZyWALL 5/35/70 UTM
• DHCP host names now have the format hostname-VPNT to improve compatibility with some DHCP servers
• XAUTH messages are no longer displayed if they have not changed since the last successful login
• Fixed an issue renewing DHCP over VPN leases

The demo mode is equivalent to the licensed Professional Edition, so some of the features (such as high-level encryption) will not be available in the Personal edition. A complete comparison of both editions is available. The demo is valid for 30 days, and connections will time out after 3 minutes.