Califax VPN Enterprise
Business access

Reach your company’s systems, and nothing else.

Access is decided by who you are, not by which network you are on. You get exactly the resources your administrator has shared with you — and every connection is recorded.

Download for Windows Version 0.9.0 · 81 MB · Windows 10 and 11

How it works

Sign in, and you are connected

No configuration files to import and nothing to set up. Sign in with your work account and the secure connection is established for you.

Only what you were given

The app shows the exact resources shared with you. Everything else is unreachable — not hidden, genuinely blocked at the network.

Your other traffic stays yours

Only company resources travel over the connection. Ordinary browsing goes out the way it normally would, and is never relayed through us.

Getting started

  1. Download and install Run the installer above. You will be asked to approve the installation.
  2. Sign in with your work account Your administrator provides your email address and password. If your company uses single sign-on, choose that option instead.
  3. Press Connect Windows asks permission once, to set up the secure connection. After that the app shows what you can reach.
Windows will warn you twice, and both are expected. This build is not yet signed with a certificate, so Windows cannot name the publisher. Nothing is wrong with the file — verify it yourself below.

1. When the download finishes your browser may say it “isn’t commonly downloaded”. Open the downloads list, click the … next to the file, and choose Keep. If it asks again, choose Show more then Keep anyway.

2. When you run it you may see “Windows protected your PC”. Choose More info, then Run anyway.

Only ever download this installer from this page.
Blocked by Smart App Control? On some Windows 11 machines you may see “Smart App Control blocked an app that may be unsafe”. Unlike the warnings above there is no way to continue past it, because Smart App Control only permits applications signed by a recognised publisher.

This is on us, not on you: our installer is not yet signed, and we are fixing it. Until then, ask whoever manages your computer — they can allow the application, or advise you. If you manage your own machine, the setting is under Windows Security → App & browser control → Smart App Control.

We would rather tell you this plainly than have you turn off a protection without understanding why.
Check you got the real file. Open PowerShell in your Downloads folder and run:

Get-FileHash .\Califax-VPN-Enterprise-Setup-0.9.0.exe
It must print exactly:

68B7309497F2B21D196B37847327DEAD6C144C911B41C064E8E81D014DEC9EEB
If it does not match, do not run it — tell your administrator.
No resources shown after connecting? That means your account is not yet in a group. Ask your administrator to add you — the app will not pretend to be connected when it has nothing to reach.

For administrators

Sign in with an administrator account and the app gains an Administration tab: add people, group them, and choose which systems each group may reach. Changes apply on the next connection, and live sessions can be cut immediately.

People and groups

Add someone once, then grant access by putting them in a group. Removing them ends their access and closes any live connection.

Share a resource

Name an address or range, and optionally a protocol and port. Narrower is safer: one address and one port beats a whole range.

A record of what happened

Who connected, what was shared with whom, and what was refused — searchable, and exportable.