What firewall to choose to support 500-1000 concurrent SSL VPN users?
Hi peers,
I'm looking for your recommendations. Which of the latest firewall products can efficiently support 500 -100 concurrent SSL VPN users along with SD-WAN?
Vice President, Security Engineering at a financial services firm with 1,001-5,000 employees
Real User
2021-07-19T19:23:08Z
Jul 19, 2021
The best investment in my opinion is the FortiGate 600E platform.
It is less than half the price of the Palo Altos and the Ciscos with twice the feature set. We just replaced Cisco ASAs with the FortiGate and could not be happier with our decision. The 600E will support up to 10,000 SSL VPN users. https://www.fortinet.com/conte...
@Mike Hancock yes you are right waht you say on 200F lient Need to consider Budget too (Earlier Fortinet Claims 100F Supports 500 SSL Vpn) Now they Promoting 200F for 500 As Per Data Sheet
CISO at a religious institution with 501-1,000 employees
Real User
2021-08-02T15:47:50Z
Aug 2, 2021
We have been using Fortinet for 3 years and find it to be a stable and secure system. Our largest user center has around 500 devices, as well as our Azure IaaS virtual firewalls, that handle the thousands of users connecting to our sites with no performance issues.
The above link will give you an idea of the VPN features of many of them.
The new OS 7 is a real winner. I have one at home, yes, I do. That is how I test and see what is true and what is not. I used to have the ASA and got rid of it.
Fortinet is the ONLY company that has chips (hardware ASIC's = Application-Specific Integrated Circuits) that will never lie to users of the real throughput, and that is priceless, I think.
Solutions Consultant at a university with 501-1,000 employees
User
2021-07-21T00:39:09Z
Jul 21, 2021
Hi Kumar,
For me, the best choice is without any doubt FG-400E which can support almost 5,000 SSL VPN users (maximum recommended in the tunnel mode) while benefiting from the SD-WAN comfort.
I could suggest the SonicWall NSa 2700. It supports a max of 500 SSL VPN clients. It sure supports SD-WAN.
Also, just a few weeks ago they launched a new solution directly on the Cloud called "Cloud Edge Secure Access". It allows access to any SaaS and can scale from 50 to 1000 users and it is easy to establish and use a new VPN protocol. I suggest trying ther free trial.
It Isn't limited to an appliance like Cisco (loosing terrain with Huawel) or Fortigate (too fancy and is loosing his north into all other integrations functionalities within devices into his gadgets), Monowall, PFSence or similar ones.
It is time to get out of the traditional and see new choices.
Cybersecurity Architecture Manager at Banco de Chile
Real User
2021-07-19T20:08:20Z
Jul 19, 2021
Hi,
I have experience using Palo Alto VPN and Palo Alto Prisma access solutions. Both of them can easily scale up to 10.000 SSL concurrent users with proper links and HA solution.
What Is SD-WAN? Software-defined networking (SDN) is a type of network architecture that uses virtualization to deliver applications and services to users in a wide area network. Wide area networks (WANs) are tools that enable organizations to extend the reach of their computer networks. Regular WANs use conventional routers to direct traffic. With cloud or hybrid environments, this causes backhaul and delays.
SD-WAN virtual architecture centralizes the control function into a software...
The best investment in my opinion is the FortiGate 600E platform.
It is less than half the price of the Palo Altos and the Ciscos with twice the feature set. We just replaced Cisco ASAs with the FortiGate and could not be happier with our decision. The 600E will support up to 10,000 SSL VPN users.
https://www.fortinet.com/conte...
@Mike Hancock yes you are right waht you say on 200F lient Need to consider Budget too (Earlier Fortinet Claims 100F Supports 500 SSL Vpn) Now they Promoting 200F for 500 As Per Data Sheet
We have been using Fortinet for 3 years and find it to be a stable and secure system. Our largest user center has around 500 devices, as well as our Azure IaaS virtual firewalls, that handle the thousands of users connecting to our sites with no performance issues.
@Lindsay Mieth Which Model idle Suite for 500 Ssl vpn (Budget alsa a Considerable Factor )
As Mike says, listen to him. I totally support Fortinet. It is not only what I say.
I am a Cisco Academy Trainer and many things more....................forget ASA. Sorry, Cisco,
You need Fortinet, believe me, you do.
https://www.fortinet.com/conte...
The above link will give you an idea of the VPN features of many of them.
The new OS 7 is a real winner. I have one at home, yes, I do. That is how I test and see what is true and what is not. I used to have the ASA and got rid of it.
Fortinet is the ONLY company that has chips (hardware ASIC's = Application-Specific Integrated Circuits) that will never lie to users of the real throughput, and that is priceless, I think.
Hi Kumar,
For me, the best choice is without any doubt FG-400E which can support almost 5,000 SSL VPN users (maximum recommended in the tunnel mode) while benefiting from the SD-WAN comfort.
I could suggest the SonicWall NSa 2700. It supports a max of 500 SSL VPN clients. It sure supports SD-WAN.
Also, just a few weeks ago they launched a new solution directly on the Cloud called "Cloud Edge Secure Access". It allows access to any SaaS and can scale from 50 to 1000 users and it is easy to establish and use a new VPN protocol. I suggest trying ther free trial.
"1000 concurrents" ! that's tough, but I'm pretty sure Sophos UTM 9 can do the job!!
Under my previous link, I wanted to show you Untangle. It is not very popular but it is growing fast, can support 1000 users. Check it out: https://www.untangle.com/untan... or https://www.untangle.com/compa...
It Isn't limited to an appliance like Cisco (loosing terrain with Huawel) or Fortigate (too fancy and is loosing his north into all other integrations functionalities within devices into his gadgets), Monowall, PFSence or similar ones.
It is time to get out of the traditional and see new choices.
Hope this helps.
Hello buddy,
I recommend FortiGate 200F. Note datasheet below :
https://www.fortinet.com/conte...
Please don't hesitate to reach out for any discussion or requests.
Mufeed Siaj.
I use Cisco Firepower 2110 and works fine.
You can try with Sophos.
cntc : 9099081709
Sandeep ji,
Select Sophos kar lo...
Best Price - Performance per user & Full SD-WAN will be Fortinet FG-400E without doubt.
Hi,
I have experience using Palo Alto VPN and Palo Alto Prisma access solutions. Both of them can easily scale up to 10.000 SSL concurrent users with proper links and HA solution.
Cisco Firepower 2110 without problems, prefer in load-balancing mode to warranty HA...
Have you seen Palo Alto solutions? They support what you're asking for.
Hello @Swapnil Talegaonkar , @MichaelZhang or @Basil Dange. Do you have any recommendations for @SandeepKumar13?