Skip Links

Network World

  • Social Web 
  • Email 
  • Close

SSL VPNs dissected

Groundbreaking test evaluates 11 products on the basis of interoperability, security, policy and high availability.
By Joel Snyder , Network World , 12/19/2005

If you don't like IPSec VPNs, then you'll love SSL VPNs. That's the pitch from vendors pushing SSL VPNs as the alternative for secure remote access, as a platform for extranet deployment and even as an internal security tool for corporate LANs.

Since we tested this class of products nearly two years ago, vendors have packed them chock full of application support, security options and end-user presentation glitter. The upshot is that comparing SSL VPN devices side by side uncovers more differences than similarities.

The 11 products we tested in seven critical areas of operation were: AEP Networks' Netilla Security Platform, Array Networks' SPX-5000, Aventail's EX-1500, Caymas Systems' Caymas 525, Check Point's Connectra, F5 Networks' FirePass 4100, Fortinet's Fortigate-3600, Juniper Networks' Secure Access 6000, Nokia's Secure Access System 500s, Nortel's VPN Gateway 3070 and SonicWall's SSL-VPN 2000.

The seven critical areas were (see How we did it):

  • Application interoperability - we tested each product's ability to run with 16 distinct applications in nine operating system and browser configurations.
  • End-point security support - we tested the efficacy of wares designed to collect information about the machines trying to get on the network, and what you can do with that information.
  • High availability - we tested the features of each product that let you build bigger and more reliable SSL VPN services.
  • Manageability - we evaluated how easy it is to manage each device, and which management systems work best.
  • Authentication - we tested six authentication systems, ranging from digital certificates to two-factor authentication, to see how compatible and flexible each product is.

As in our last test, Juniper steps to the front of the line with a massive set of enterprise features. In every category, including end-point security, detailed access control and interoperability testing, Juniper leads the pack.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask to prospective vendors to get the right endpoint solution.

Download the white paper.

Unauthorized applications: Taking back control

Employees installing and using unauthorized applications like IM, VoIP, games and peer-to-peer file-sharing applications cause many businesses serious concern. How do you control these applications?

Download the white paper.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to moderator approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Save The Date!
What They Are Saying

hey buddy, you save my life :D thanx alot- Hamid

Join the Discussion