Update supported protocols

* Standardise on Array Networks, not Array Networks AG

  From https://arraynetworks.com/ssl-vpn/:

  > Array SSL VPN gateways provide secure remote access to
  > applications, desktops, file shares, networks, and Web
  > sites from a broad range of remote and mobile devices.
  > Deployed at the network perimeter or in front of
  > business-critical resources, the AG provides secure
  > remote access for employees, guests, partners, and
  > other communities of interest. SSL VPNs are ideal for
  > simplifying the user experience while reducing potential
  > attack vectors.
  >
  > Every AG SSL VPN provides a complete secure access
  > feature set, including TLS encrypted connectivity,
  > device validation, endpoint and server-side security,
  > advanced AAA, and granular policy controls. Available
  > as physical or virtual appliances, or on your choice
  > of public cloud, the AG Series is ideal for businesses
  > needing enterprise-wide remote access, and for cloud
  > service providers needing flexible remote access to
  > meet broad ranging customer requirements.

  I think AG refers to the gateway series that support SSL VPN,
  not to the protocol.
* PAN → Palo Alto Networks

  End-users may not know of this abbreviation, which is not
  used in the documentation and marketing material.
* Add Ivanti to Pulse Connect Secure
* List these protocols separately:
  - Juniper Network Connect
  - Pulse/Ivanti Connect Secure

Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>

diff --git a/.obs/debian/control b/.obs/debian/control
index 004a556bf5719c81f054ef993dd8941244ac28c0..ac194d6275f811124ed627b7aa2062f62b9f4910 100644 (file)
--- a/.obs/debian/control
+++ b/.obs/debian/control
@@ -40,7 +40,7 @@ Description: open client for various network vendors SSL VPNs
  AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
  Secure VPN (formerly known as Juniper Network Connect or Junos Pulse), the Palo
  Alto Networks GlobalProtect SSL VPN, F5 Big-IP SSL VPN, Fortinet Fortigate SSL
- VPN and Array Networks AG SSL VPN.
+ VPN and Array Networks SSL VPN.
  .
  A corresponding OpenConnect VPN server implementation can be found in the
  ocserv package.
@@ -64,7 +64,7 @@ Description: open client for various network vendors SSL VPNs - development file
  AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
  Secure VPN (formerly known as Juniper Network Connect or Junos Pulse), the Palo
  Alto Networks GlobalProtect SSL VPN, F5 Big-IP SSL VPN, Fortinet Fortigate SSL
- VPN and Array Networks AG SSL VPN.
+ VPN and Array Networks SSL VPN.
  .
  This package provides the header and development files.
 
@@ -80,6 +80,6 @@ Description: open client for various network vendors SSL VPNs - shared library
  AnyConnect SSL VPN. It has since been extended to support the Pulse Connect
  Secure VPN (formerly known as Juniper Network Connect or Junos Pulse), the Palo
  Alto Networks GlobalProtect SSL VPN, F5 Big-IP SSL VPN, Fortinet Fortigate SSL
- VPN and Array Networks AG SSL VPN.
+ VPN and Array Networks SSL VPN.
  .
  This package provides the shared library.

diff --git a/mingw-openconnect.spec.in b/mingw-openconnect.spec.in
index 0da64fad484d13ea3a4abf40f396c31b32d1a022..4fd0111d35283f18aa7c4388ba7d2509a0d98eed 100644 (file)
--- a/mingw-openconnect.spec.in
+++ b/mingw-openconnect.spec.in
@@ -13,7 +13,7 @@
 Name:          mingw-openconnect
 Version:       %{tagver}%{?snapver}
 Release:       0%{?dist}
-Summary:       Open client for SSL VPNs including Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect, Fortinet, etc.
+Summary:       Open client for SSL VPNs including Cisco AnyConnect VPN, Juniper Network Connect, Pulse/Ivanti Connect Secure, Palo Alto Networks GlobalProtect, F5 Big-IP, Fortinet, Array Networks, etc.
 
 License:       LGPLv2
 URL:           https://www.infradead.org/openconnect.html

diff --git a/openconnect.8.in b/openconnect.8.in
index 53c3aaf0d499c8e3700bcf88b8dba3f978222cd7..9771a759441e8865725d9d5ffb07b1a810858627 100644 (file)
--- a/openconnect.8.in
+++ b/openconnect.8.in
@@ -85,9 +85,9 @@ It was originally written to support Cisco "AnyConnect" VPN servers,
 and has since been extended with experimental support for Juniper
 Network Connect
 .RB ( \-\-protocol=nc ),
-Junos/Ivanti Pulse VPN servers
+Pulse/Ivanti Connect Secure VPN servers
 .RB ( \-\-protocol=pulse ),
-PAN GlobalProtect VPN servers
+Palo Alto Networks GlobalProtect VPN servers
 .RB ( \-\-protocol=gp ),
 F5 Big-IP VPN servers
 .RB ( \-\-protocol=f5 ),
@@ -705,11 +705,11 @@ to be used for the connection. Supported protocols are
 for Cisco AnyConnect (the default),
 .I nc
 for experimental support for Juniper Network Connect (also supported
-by most Junos/Ivanti Pulse servers),
+by most Ivanti/Pulse Connect Secure servers),
 .I pulse
-for experimental support for Junos/Ivanti Pulse,
+for experimental support for Ivanti/Pulse Connect Secure,
 .I gp
-for experimental support for PAN GlobalProtect,
+for experimental support for Palo Alto Networks GlobalProtect,
 .I f5
 for experimental support for F5 Big-IP,
 .I fortinet

diff --git a/openconnect.spec.in b/openconnect.spec.in
index e7955b1ac782a1291af448d1c5283241ddf80e1a..867f6503e36901294e37dd796b9f42e1d7474092 100644 (file)
--- a/openconnect.spec.in
+++ b/openconnect.spec.in
@@ -23,7 +23,7 @@
 Name:          openconnect
 Version:       %{tagver}%{?snapver}
 Release:       0%{?dist}
-Summary:       Open client for SSL VPNs including Cisco AnyConnect VPN, Juniper Network Connect/Pulse, PAN GlobalProtect, Fortinet, etc.
+Summary:       Open client for SSL VPNs including Cisco AnyConnect VPN, Juniper Network Connect, Pulse/Ivanti Connect Secure, Palo Alto Networks GlobalProtect, F5 Big-IP, Fortinet, Array Networks, etc.
 
 License:       LGPLv2
 URL:           https://www.infradead.org/openconnect.html

diff --git a/www/array.xml b/www/array.xml
index 73247ba2e37f90153519310c2b93d4db6783f281..40d0c6c057e7cc00d8e6f9004ed62799687a8212 100644 (file)
--- a/www/array.xml
+++ b/www/array.xml
@@ -8,7 +8,7 @@
 
        <INCLUDE file="inc/content.tmpl" />
 
-<h1>Array Networks AG SSL VPN</h1>
+<h1>Array Networks SSL VPN</h1>
 
 <p>Experimental support for <a
 href="https://arraynetworks.com/products-secure-access-gateways-ag-series.html">Array

diff --git a/www/changelog.xml b/www/changelog.xml
index 5d5f12a1808c650afe364ba306288af2c592efee..3faab6b6c4aad02c102c1e71b143ecd5358a7354 100644 (file)
--- a/www/changelog.xml
+++ b/www/changelog.xml
@@ -259,7 +259,7 @@
        <li>Relax requirements for Juniper hostname packet response to support old gateways.</li>
        <li>Add API functions to query the supported protocols.</li>
        <li>Verify ESP sequence numbers and warn even if replay protection is disabled.</li>
-       <li>Add support for PAN GlobalProtect VPN protocol (<tt>--protocol=gp</tt>).</li>
+       <li>Add support for Palo Alto Networks (PAN) GlobalProtect VPN protocol (<tt>--protocol=gp</tt>).</li>
        <li>Reorganize listing of command-line options, and include information on supported protocols.</li>
        <li>SIGTERM cleans up the session similarly to SIGINT.</li>
      </ul><br/>

diff --git a/www/connecting.xml b/www/connecting.xml
index 3b74bc8aba8191bf649e47b2ce24bb1705377d6f..596b9924afea2295cdb9d3e369f8eba3442bc46e 100644 (file)
--- a/www/connecting.xml
+++ b/www/connecting.xml
@@ -17,7 +17,7 @@
    <li><tt>openconnect https://vpn.mycompany.com/</tt></li>
  </ul>
  For one of the other <a href="protocols.html">supported protocols</a>, you'll need to add <tt>--protocol</tt>.
- For example, for a PAN GlobalProtect VPN:
+ For example, for a Palo Alto Networks GlobalProtect VPN:
  <ul>
    <li><tt>openconnect --protocol=gp https://vpn.mycompany.com/</tt></li>
  </ul>

diff --git a/www/globalprotect.xml b/www/globalprotect.xml
index b9147ed967e160f868a72f5a0e2e41cad4b7b87c..2152b222a69961338d8b1d0a7fc13db8f9171b11 100644 (file)
--- a/www/globalprotect.xml
+++ b/www/globalprotect.xml
@@ -8,7 +8,7 @@
 
        <INCLUDE file="inc/content.tmpl" />
 
-<h1>PAN GlobalProtect</h1>
+<h1>Palo Alto Networks (PAN) GlobalProtect</h1>
 
 <h2>How the VPN works</h2>
 

diff --git a/www/hip.xml b/www/hip.xml
index e64b3a0fce5d8281b96ca58a613a8b42a6052d4d..92d901de51a8cafc0ae407ba9ed1ae48086c05ec 100644 (file)
--- a/www/hip.xml
+++ b/www/hip.xml
@@ -8,12 +8,13 @@
 
        <INCLUDE file="inc/content.tmpl" />
 
-<h1>PAN GlobalProtect HIP</h1>
+<h1>Palo Alto Networks GlobalProtect HIP</h1>
 
 <p>The HIP ('Host Integrity Protection') mechanism is a security
-scanner for the <a href="globalprotect.html">PAN GlobalProtect</a>
-VPNs, in the same vein as <a href="csd.html">Cisco's CSD</a> and <a
-href="tncc.html">Juniper's Host Checker (tncc.jar)</a>.</p>
+scanner for the <a href="globalprotect.html">Palo Alto Networks
+GlobalProtect</a> VPNs, in the same vein as
+<a href="csd.html">Cisco's CSD</a> and <a href="tncc.html">Juniper's
+Host Checker (tncc.jar)</a>.</p>
 
 <h2>How it works</h2>
 

diff --git a/www/index.xml b/www/index.xml
index 9b92ffe3212b3330d157433f3a4db7cbc6d91a45..378caebc26301019c8d9b2940062bb240022d899 100644 (file)
--- a/www/index.xml
+++ b/www/index.xml
@@ -13,7 +13,7 @@
 
 <ul>
   <li><a href="anyconnect.html">Cisco AnyConnect</a> (<tt>--protocol=anyconnect</tt>)</li>
-  <li><a href="array.html">Array Networks AG SSL VPN</a> (<tt>--protocol=array</tt>)</li>
+  <li><a href="array.html">Array Networks SSL VPN</a> (<tt>--protocol=array</tt>)</li>
   <li><a href="juniper.html">Juniper SSL VPN</a> (<tt>--protocol=nc</tt>)</li>
   <li><a href="pulse.html">Pulse Connect Secure</a> (<tt>--protocol=pulse</tt>)</li>
   <li><a href="globalprotect.html">Palo Alto Networks GlobalProtect SSL VPN</a> (<tt>--protocol=gp</tt>)</li>

diff --git a/www/mail.xml b/www/mail.xml
index 2a4fedd070c160ec829e383a3aa2dcb972fa7db0..030cabe7af4af15ca0a7736a75b22a9a4ea7d84e 100644 (file)
--- a/www/mail.xml
+++ b/www/mail.xml
@@ -58,7 +58,7 @@
        </p>
        <p>For Juniper VPN, the equivalent is a <tt>DSID</tt> cookie, which is not yet filtered
        out of any output <i>(the authentication support in Juniper is still very new)</i>.
-       For PAN GlobalConnect, the equivalent is a URL-encoded
+       For Palo Alto Networks GlobalConnect, the equivalent is a URL-encoded
        <tt>authcookie</tt> parameter, which is also not filtered out of any output.</p>
 
        <h1>Internet Relay Chat (IRC)</h1>

diff --git a/www/protocols.xml b/www/protocols.xml
index f218bcaa2102ef7e8cc00d034dc84189b33c4095..93fe3a25d4808ff9e99d6da9f61a110bbc21424f 100644 (file)
--- a/www/protocols.xml
+++ b/www/protocols.xml
@@ -22,7 +22,7 @@ See <a href="manual.xml">the <tt>--protocol</tt> option</a> for how to use a dif
   <li><a href="juniper.html">Details</a> on support for
   Juniper SSL VPN (<tt>--protocol=nc</tt>)</li>
   <li><a href="juniper.html">Details</a> on support for
-  <a href="https://www.ivanti.com/products/connect-secure-vpn">Pulse Connect Secure</a> SSL VPN (<tt>--protocol=pulse</tt>;
+  <a href="https://www.ivanti.com/products/connect-secure-vpn">Pulse/Ivanti Connect Secure</a> SSL VPN (<tt>--protocol=pulse</tt>;
   most Pulse VPNs also support the older Juniper protocol, unless explicitly disabled)</li>
   <li><a href="globalprotect.html">Details</a> on support for
   <a href="https://www.paloaltonetworks.com/features/vpn">Palo Alto Networks GlobalProtect SSL VPN</a> (<tt>--protocol=gp</tt>)</li>