Notes

• Remember a client in this scheme needs to have a push route and a firewall rule to be be able access resources.
• It is recommended to allow ICMP everywhere on the OpenVPN firewall rules tab to help debugging.

Why use port 443/tcp ?

Listening on port 443/tcp is optional but can be useful. Many firewalls allow outbound access to destination port 443/tcp (https) or the ability of OpenVPN to go through web proxies may be utilized. There tend to be less problems using port 443. If there is only one external IP address available and need to run a web server on it then this will be impractical, use port 1194 in that case, UDP is best for VPNs, but if port 443 is used, then use TCP.