2021-07-15T03:22:00Z
SandeepKumar13 - PeerSpot reviewer
IT Manager at a legal firm with 11-50 employees
  • 16
  • 1322

What firewall to choose to support 500-1000 concurrent SSL VPN users?

Hi peers,

I'm looking for your recommendations. Which of the latest firewall products can efficiently support 500 -100 concurrent SSL VPN users along with SD-WAN?

16
PeerSpot user
16 Answers
Mike Hancock - PeerSpot reviewer
Vice President, Security Engineering at a financial services firm with 1,001-5,000 employees
Real User
Top 20
2021-07-19T19:23:08Z
Jul 19, 2021

The best investment in my opinion is the FortiGate 600E platform. 


It is less than half the price of the Palo Altos and the Ciscos with twice the feature set. We just replaced Cisco ASAs with the FortiGate and could not be happier with our decision. The 600E will support up to 10,000 SSL VPN users. 
https://www.fortinet.com/conte...

SandeepKumar13 - PeerSpot reviewer
IT Manager at a legal firm with 11-50 employees
Real User
Top 10
Aug 4, 2021

@Mike Hancock yes you are right waht you say on 200F  lient Need to consider Budget too  (Earlier Fortinet Claims 100F Supports 500 SSL Vpn) Now they Promoting 200F for 500 As Per Data Sheet 

PeerSpot user
Search for a product comparison in Firewalls
LM
CISO at a religious institution with 501-1,000 employees
Real User
Top 5
2021-08-02T15:47:50Z
Aug 2, 2021

We have been using Fortinet for 3 years and find it to be a stable and secure system. Our largest user center has around 500 devices, as well as our Azure IaaS virtual firewalls, that handle the thousands of users connecting to our sites with no performance issues.

SandeepKumar13 - PeerSpot reviewer
IT Manager at a legal firm with 11-50 employees
Real User
Top 10
Aug 4, 2021

@Lindsay Mieth Which Model idle Suite for 500 Ssl vpn (Budget alsa a  Considerable Factor ) 

PeerSpot user
Richard Benfatto - PeerSpot reviewer
Networking Security Expert at SR Technologies
User
Top 5
2021-07-20T08:09:03Z
Jul 20, 2021

As Mike says, listen to him. I totally support Fortinet. It is not only what I say. 


I am a Cisco Academy Trainer and many things more....................forget ASA. Sorry, Cisco,


You need Fortinet, believe me, you do.


https://www.fortinet.com/conte...


The above link will give you an idea of the VPN features of many of them.


The new OS 7 is a real winner. I have one at home, yes, I do. That is how I test and see what is true and what is not. I used to have the ASA and got rid of it.


Fortinet is the ONLY company that has chips (hardware ASIC's = Application-Specific Integrated Circuits) that will never lie to users of the real throughput, and that is priceless, I think.

SA
Solutions Consultant at a tech services company with 51-200 employees
User
2021-07-21T00:39:09Z
Jul 21, 2021

Hi Kumar,


For me, the best choice is without any doubt FG-400E which can support almost 5,000 SSL VPN users (maximum recommended in the tunnel mode) while benefiting from the SD-WAN comfort.

Pedro Escalona - PeerSpot reviewer
Executive at BRIES COMSYS
Real User
Top 5
2021-07-19T22:40:52Z
Jul 19, 2021

I could suggest the SonicWall NSa 2700. It supports a max of 500 SSL VPN clients. It sure supports SD-WAN.


Also, just a few weeks ago they launched a new solution directly on the Cloud called "Cloud Edge Secure Access". It allows access to any SaaS and can scale from 50 to 1000 users and it is easy to establish and use a new VPN protocol. I suggest trying ther free trial.

Luis Apodaca - PeerSpot reviewer
IT Support and Network Admin at Escuela Carlos Pereyra
User
Top 5
2021-08-11T20:02:39Z
Aug 11, 2021

"1000 concurrents" ! that's tough, but I'm pretty sure Sophos UTM 9 can do the job!!

Learn what your peers think about Check Point CloudGuard Network Security. Get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
655,711 professionals have used our research since 2012.
MM
User at MMP Computer Services
User
2021-08-04T04:09:55Z
Aug 4, 2021

Under my previous link, I wanted to show you Untangle. It is not very popular but it is growing fast, can support 1000 users. Check it out: https://www.untangle.com/untan...   or https://www.untangle.com/compa...  

It Isn't limited to an appliance like Cisco (loosing terrain with Huawel) or Fortigate (too fancy and is loosing his north into all other integrations functionalities within devices into his gadgets), Monowall, PFSence or similar ones. 


It is time to get out of the traditional and see new choices.

Hope this helps.

Mufeed Siaj - PeerSpot reviewer
Network Security Presales Engineer at a tech services company with 51-200 employees
MSP
2021-07-25T07:24:27Z
Jul 25, 2021

Hello buddy,

I recommend FortiGate 200F. Note datasheet below :


https://www.fortinet.com/conte...

Please don't hesitate to reach out for any discussion or requests.


Mufeed Siaj.



Cesar Beut - PeerSpot reviewer
Networking Specialist at a healthcare company with 1,001-5,000 employees
Real User
Top 5
2021-07-22T10:16:04Z
Jul 22, 2021

I use Cisco Firepower 2110 and works fine.

JP
Engineer at a pharma/biotech company with 501-1,000 employees
Real User
2021-07-21T04:48:36Z
Jul 21, 2021

You can try with Sophos.


cntc : 9099081709

Arvind Gupta - PeerSpot reviewer
Senior Technical Consultant at Hash 1 IP services llp
Consultant
Top 10
2021-07-20T01:46:47Z
Jul 20, 2021

Sandeep ji,

Select Sophos kar lo...

Victor Mejia - PeerSpot reviewer
SOC & SECURITY SERVICES DIRECTOR at BESTEL
Reseller
Top 10
2021-07-19T23:44:51Z
Jul 19, 2021

Best Price - Performance per user & Full SD-WAN will be Fortinet FG-400E without doubt.

Juan Salvador Vial - PeerSpot reviewer
Cybersecurity Architecture Manager at Banco de Chile
Real User
Top 10
2021-07-19T20:08:20Z
Jul 19, 2021

Hi,


I have experience using Palo Alto VPN and Palo Alto Prisma access solutions. Both of them can easily scale up to 10.000 SSL concurrent users with proper links and HA solution.

AA
Electronic Engineer at DXC
Real User
2021-07-19T17:10:50Z
Jul 19, 2021

Cisco Firepower 2110 without problems, prefer in load-balancing mode to warranty HA...

SImoneGebellato - PeerSpot reviewer
Group IT Architect & Network Engineer at a engineering company with 11-50 employees
Real User
2021-07-19T17:07:59Z
Jul 19, 2021

Have you seen Palo Alto solutions? They support what you're asking for.

Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Community Manager
2021-07-15T04:43:59Z
Jul 15, 2021

Hello @Swapnil Talegaonkar ​, @MichaelZhang ​or @Basil Dange. Do you have any recommendations for @SandeepKumar13?

Related Questions
Yunus Yavuz - PeerSpot reviewer
Product Manager at Neteks
Nov 10, 2022
Hi peers,  I am a Product Manager at a small computer networking company. At the moment, I am researching Check Point's products. Is Check Point's software compatible with other products (including firewall products, servers, and more)? If so, which products? Are there products that are not compatible with Check Point's software? In addition, can you provide any specific documentation that ...
See 1 answer
Larry Chisholm - PeerSpot reviewer
Network Engineer at Solvonex
Nov 10, 2022
Checkpoint is an INCREDIBLY secure, but inherently frustrating platform to manage.    The gui/cli must often be used together to effect the changes you're looking for.   Don't get me started on the gaia hardware management interface.    If you must buy it, ensure that you get support.     Personally, I'll take Fortinet, Palo Alto or even Juniper SRX over anything checkpoint.
RV
Divisional Engineer at Aptransco
Aug 18, 2022
Hi members, What kinds of throughputs should we consider while designing/estimating the required firewall throughput in our organization? Thank you.
2 out of 5 answers
Aug 16, 2022
Different vendors have a slower speed for each option you enable on their devices so overestimate the size.  Some vendors will tell you the % of slowdown but consider double the line speed to compensate for the device's slowdown.
CR
Director at REDCO
Aug 16, 2022
Usually, it is the Internet bandwidth, a number of users and (in the case of NGFW) you have to check if you are going to perform SSL filtering and application control, but lately, they are more concerned about the type of link to the Internet.  Almost all manufacturers have a link to check the size of the firewall, but unfortunately, it is for partners only. If it is possible to have more information we can make an approximation with SOPHOS or Fortinet, if you like.
Related Articles
Ariel Lindenfeld - PeerSpot reviewer
Director of Community at PeerSpot
Aug 21, 2022
We’re launching an annual User’s Choice Award to showcase the most popular B2B enterprise technology products and we want your vote! If there’s a technology solution that’s really impressed you, here’s an opportunity to recognize that. It’s easy: go to the PeerSpot voting site, complete the brief voter registration form, review the list of nominees and vote. Get your colleagues to vote, too! ...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Hi dear community members, In this edition of PeerSpot's Community Spotlight, you can find out what your peers are discussing and join in the conversation. Ask and answer questions on the topics that interest you most! Read and respond to articles or contribute your own! Trending These are the topics your peers are talking about on PeerSpot this week How do I estimate the requir...
See 1 comment
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Thank you to all the community members who share their knowledge with other peers! Also, special thanks to the articles' contributors included in this Community Spotlight: @Janet Staver, @Abhirup Sarkar, @Manoj Narayanan, @Beth Safire and @Shibu Babuchandran.
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Jul 5, 2022
Dear PeerSpot community members, This is our latest Community Spotlight for YOU. Here we've summarized and selected the latest posts (professional questions, articles and discussions) contributed by PeerSpot community members.  Check them out! Trending See what your peers are discussing at the moment! What were your main pain points during the SIEM product purchase process? What...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
May 30, 2022
Hi peers, This is our new bi-weekly Community Spotlight that includes recent contributions (questions, articles and discussions) by the PeerSpot community members.  Articles Check the top products and solutions below (selected based on peer reviews) or contribute your own article! Top Security Orchestration Automation and Response (SOAR) Solutions Top 8 Data Loss Prevention (DL...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Jul 11, 2022
Hi community members, As usual, this new Community Spotlight shares with you the latest articles, questions and trending discussions from your peers. Trending See what is trending at the moment and chime in to discuss! Top 8 Extended Detection and Response (XDR) Tools 2022 Would you recommend replacing Cisco ASA Firewall with Fortinet FortiGate FG 100F due to cost reasons? What is the...
See 2 comments
Ravi Suvvari - PeerSpot reviewer
Performance and Fault-tolerance Architect with 1,001-5,000 employees
May 30, 2022
Good very informative
Jairo Willian Pereira - PeerSpot reviewer
Information Security Manager at a financial services firm with 5,001-10,000 employees
Jul 11, 2022
Analyze the wave of product at Gartner Hype Cycle. EDR was good in the past. After that, MDR joined the hype and now, XDR is the trend. Wait for more in a couple of months and (sic) know the ZDR!
Related Articles
Ariel Lindenfeld - PeerSpot reviewer
Director of Community at PeerSpot
Aug 21, 2022
PeerSpot User's Choice Award 2022
We’re launching an annual User’s Choice Award to showcase the most popular B2B enterprise technol...
Evgeny Belenky - PeerSpot reviewer
Director of Community at PeerSpot (formerly IT Central Station)
Aug 17, 2022
Community Spotlight #20
Hi dear community members, In this edition of PeerSpot's Community Spotlight, you can find out w...
Download Free Report
Download our free Check Point CloudGuard Network Security Report and get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
DOWNLOAD NOW
655,711 professionals have used our research since 2012.