Looking for a VPN solution for my clients so they can safely connect to work resources on any WiFi. I would think Microsoft would have an offering for this, but I don’t see one that doesn’t involve setup of their “Always On VPN” solution.
What VPN solutions do you all use?
OpenVPN Access Server for our clients that don’t have a commercial firewall
What firewall/edge device do your clients use? Most commercial Firewalls have built in vpn functionality for road warriors.
I plan on giving Cloudflare zero trust tunnels a whirl here soon.
Sophos via the firewall.
Softether it’s free and easy to step up. We have it on a bunch of sites.
Azure VPN P2S. It’s offered by Microsoft.
Can’t go wrong with an OpenVPN Access Server on a Linux VM
Or a PFSense VM that’s already equipped with open VPN.
Or PFSense edge router.
Fortigate VPN is also good and has its own fortiddns so you don’t have to use a third party ddns service
Use azure vpn with a S2S tunnel for some of my bigger, multi site clients.
Otherwise it’s usually the routers ssl vpn, in most cases sophos for us.
ZeroTier and Cloudflare Tunnels are solid.
Go with whatever your edge offers for simplicity sake.
Twingate is my go to now. Effectively replaced OpenVPN for small clients
Tailscale, hands down.
NetBird: https://netbird.io and actually they are optimizing their product for MSPs for simplicity and lower costs
Twingate is the best from my POV, but also have experience with OpenVPN and Cloudflare tunnels. Depends on what you’re trying to solve for your clients.
Do you need to use VPN? What resources are they trying to access?
Cloudflare Zero Trust (CTZ) or Cisco AnyConnect on FirePower chassis with ASA image
Sophos XGS Open VPN with Sophos AWS Virtual Firewall Open VPN
If your firewall has no built-in solid solution, you could use an Azure P2S with Always On VPN. Of course, you would also need a site to site through Azure to each site, or just move the resources into Azure lol
My own OpenVPN service. Depends where they are connected and I give them the keys
We like Perimeter 81 and GoodAccess for cloud-based VPNs. We use Cisco/Meraki for firewall VPN and IPsec tunnels.