The table below shows the major differences between these four approaches in terms of relative client deployment effort, resource access, client device support and network access control support. Standalone executable for desktop and laptop OSs.Browser plug-in (Java applet, ActiveX control run within browser).Clientless (relies solely on the web browser, no software installation).There are four approaches to SSL VPN client software: Some commercial SSL VPN products only support a flat number of users, while other products have the hardware capacity to support a larger number of users but allow organizations to purchase a smaller number of simultaneous user licenses.Ĭriterion #1: VPN client software options That's because each organization has unique characteristics that need to be taken into account, so the findings of this article should not be considered comprehensive or exhaustive - they comprise one piece of a larger puzzle. Organizations considering the acquisition of an SSL VPN product should use these criteria as one part of their overall product evaluation process. This article covers the following commercial SSL VPN products: Barracuda SSL VPN, Check Point Mobile Access Software Blade, Cisco IOS SSL VPN, Dell SonicWall Secure Remote Access (SRA), Juniper Networks SA Series (now Pulse Connect Secure), and OpenVPN Access Server.Įach of these has been evaluated against a set of four criteria: VPN client software options operating system (OS) support simultaneous users support and network access control. That being said, the dedicated SSL VPN products are often the same ones found bundled with others, so the evaluations presented in this article may also be relevant to organizations seeking bundled products. It would be foolish for an organization to simply ignore an existing bundled SSL VPN capability just for the sake of having a dedicated SSL VPN product, without sufficient justification for making this decision. Each product, regardless of its form, needs to be evaluated on its own merits. This is not meant to imply that these are superior to bundled products. This article focuses on evaluating dedicated SSL VPN products: standalone appliances and virtual appliances. Regardless of the form the SSL VPN capability comes in, its functionality and other major characteristics are basically the same. Yet another option for some organizations is to purchase their SSL VPN as a virtual appliance.

An organization can purchase a standalone appliance that functions solely for SSL VPN, or a bundled device - such as a next-generation firewall (NGFW) or unified threat management (UTM) product - that performs many functions, with an SSL VPN capability being just one of them. There are several ways to procure SSL VPN products.

Ssl vpn juniper