Scorecard and NetResults: VPNs

Scorecard

.

	Inter- opera- bility 25%	Mgt 25%	Perf- orm- ance 20%	Flex- ibil- ity 20%	Docu- ment- ation 10%	Total
Radguard cIPro System 3.30	9 x 0.25 = 2.25	6 x 0.25 = 1.50	9 x 0.20 = 1.80	9 x 0.20 = 1.80	6 x 0.10 = 0.60	7.95
VPNet VPNware VSU-1100 2.51	7 x 0.25 = 1.75	7 x 0.25 = 1.75	10 x 0.20 = 2.00	8 x 0.20 = 1.60	6 x 0.10 = 0.60	7.70
Check Point VPN-1 Gateway	6 x 0.25 = 1.50	7 x 0.25 = 1.75	8 x 0.20 = 1.60	8 x 0.20 = 1.60	6 x 0.10 = 0.60	7.05
RedCreek Ravlin 10/5100 3.0.2	9 x 0.25 = 2.25	6 x 0.25 = 1.50	5 x 0.20 = 1.00	8 x 0.20 = 1.60	7 x 0.10 = 0.70	7.05
TimeStep Permit Gateway 4520	5 x 0.25 = 1.25	6 x 0.25 = 1.50	5 x 0.20 = 1.00	10 x 0.20 = 2.00	7 x 0.10 = 0.70	6.45
Data Fellows F-Secure VPN+ 4.0	9 x 0.25 = 2.25	3 x 0.25 = 0.75	6 x 0.20 = 1.20	8 x 0.20 = 1.60	6 x 0.10 = 0.60	6.40
Nortel Contivity Extranet Switch 1500 2.0	7 x 0.25 = 1.75	4 x 0.25 = 1.00	7 x 0.20 = 1.40	8 x 0.20 = 1.60	6 x 0.10 = 0.60	6.35
Axent Raptor Firewall/ VPN Server	6 x 0.25 = 1.50	4 x 0.25 = 1.00	6 x 0.20 = 1.20	9 x 0.20 = 1.80	7 x 0.10 = 0.70	6.20
Lucent VPN Gateway 2.0	5 x 0.25 = 1.25	4 x 0.25 = 1.00	8 x 0.20 = 1.60	9 x 0.20 = 1.80	4 x 0.10 = 0.40	6.05
Intel LanRover VPN Gateway 6.6	5 x 0.25 = 1.25	6 x 0.25 = 1.50	6 x 0.20 = 1.20	8 x 0.20 = 1.60	4 x 0.10 = 0.40	5.95
3Com Path- Builder S580	5 x 0.25 = 1.25	2 x 0.25 = 0.50	10 x 0.20 = 2.00	6 x 0.20 = 1.20	7 x 0.10 = 0.70	5.65
Internet Dynamics Conclave 1.52	1 x 0.25 = 0.25	9 x 0.25 = 2.25	5 x 0.20 = 1.00	6 x 0.20 = 1.20	7 x 0.10 = 0.70	5.40
Novell Border- Manager Firewall Services 3	1 x 0.25 = 0.25	4 x 0.25 = 1.00	4 x 0.20 = 0.80	6 x 0.20 = 1.20	4 x 0.10 = 0.40	3.65
Compatible Systems IntraPort 2+	1 x 0.25 = 0.25	2 x 0.25 = 0.50	6 x 0.20 = 1.20	6 x 0.20 = 1.20	4 x 0.10 = 0.40	3.55
Microsoft Routing and Remote Access Service	1 x 0.25 = 0.25	4 x 0.25 = 1.00	5 x 0.20 = 1.00	4 x 0.20 = 0.80	5 x 0.10 = 0.50	3.55

Chart note re: Lucent's interoperability score. We did not test interoperability for Lucent. 5 is the average interoperability score for the other 14 vendors. NetResults

cIPro System 3.30
Radguard
(201) 828-9611
$6,450
Pros: Small form factor; Good price/performance ratio; Centralized management interface
Cons: Initial key distribution is somewhat awkward; Requires dedicated management station and certificate authority

VPNware VSU-1100 2.51
VPNet Technologies
(408) 445-6600
$17,995
Pros: High performance; Nicely unified management
Cons: High price

VPN-1 Gateway Solution with VPN-1 Accelerator Card
Check Point Software Technologies
(650) 628-2000
Web site
$3,495 plus $3995 for accelerator
Pros: Integrated with firewall; Unified management interface; Hardware acceleration available
Cons: Requires additional hardware and OS configuration; Difficult to do VPN-only configuration

Ravlin 10/5100 3.0.2
RedCreek Communications
(888) 745-3900
Web site
$3,500
Pros: Elegant form factor; Simple GUI and configuration
Very good IPsec feature set; Excellent price/performance ratio
Cons: Limited to near-T1 encryption speeds

TimeStep Permit Gateway 4520
TimeStep
(800) 383-8211
$5,495
Pros: Elegant form factor; Excellent PKI integration; Good management interface
Cons: Limited to near-T1 encryption speeds; Poor price/performance ratio

F-Secure VPN+ 4.0
Data Fellows
(408) 938 6700
$2,495
Pros: Uses off-the-shelf hardware; Integrates with Windows NT Security Account Manager
Cons: Requires additional hardware and OS configuration; Complex management utility is difficult to set up and use

Contivity Extranet Switch 1500 2.0
Nortel Networks
(800) 466-7835
Web site
$7,000
Pros: Easy to configure single units with Web browser
Cons: Unit-by-unit management is slow and difficult to use

Raptor Firewall/VPN Server
Axent Technologies
(301) 258-5043
Web site
$2,500
Pros: Integrated with firewall; Unified management interface
Cons: Requires additional hardware and OS configuration; Difficult to do VPN-only configuration; Unit-by-unit management is difficult

VPN Gateway 2.0 with Encryption Accelerator Card
Lucent
(888) 552-2544
Web site
$9,995 plus $3,495 for accelerator
Pros: Includes firewall capabilities;Optional hardware acceleration
Cons: Difficult management interface

LanRover VPN Gateway 6.6
Intel
(800) 977-4482
Web site
$6,200
Pros: Good integration with remote authentication system for telecommuters and remote access users
Cons: Very large form factor; Difficult debugging facilities

PathBuilder S580
3Com
(800) 638-3266
$29,500
Pros: High performance; Excellent form factor
Cons: Horrible command-line interface

Conclave 1.52
Internet Dynamics
(805) 370-2200
$2,495
Pros: Elegant management interface; Includes policy-based firewall
Cons: Runs on Windows NT, which hurts performance; Not IKE-compliant

BorderManager Firewall Services 3
Novell
(801) 228-4272
Web site
$995
Pros: Integrated with NetWare
Cons: Does not support IKE

IntraPort 2+
Compatible Systems
(800) 356-0283
Web site
$9,995
Pros: Multiprotocol routing
Cons: Not interoperable

Routing and Remote Access Service
Microsoft
(425) 882-8080
Web site
Bundled with Windows NT Server
Pros: No cost on top of existing NT servers; Integrates with Windows NT Security Account Manager; Supports built-in client in existing Windows systems
Cons: Only supports RC4 encryption and PPTP protocol; No support for non-Windows platforms

Performance

	Multi- stream (in M bit/sec)	Single stream (in M bit/sec)
3Com PathBuilder S580	61.3	10.3
VPNet VPNware VSU-1100 2.51	60.0	21.0
Lucent VPN Gateway 2.0*	30.2	8.1
Radguard cIPro System 3.30	28.6	18.0
Check Point' VPN-1 Gateway*	23.1	12.4
Nortel Contivity Extranet Switch 1500 2.0	11.9	6.7
Intel LanRover VPN Gateway 6.6*	8.9	3.5
Axent Raptor Firewall/VPN Server**	8.3	6.1
Compatible Systems IntraPort 2+	7.2	2.5
Microsoft Routing and Remote Access Service**	6.2	2.1
TimeStep Permit Gateway 4520	5.1	2.0
Data Fellows F-Secure VPN+ 4.0**	5.1	4.6
Internet Dynamics Conclave 1.52**	4.2	3.4
RedCreek Ravlin 10/100 3.0.2	3.7	3.0
Novell BorderManager Firewall Services 3	3.0	2.1

* With accelerator
** Software tested on a 350-MHz Pentium II system