We're currently using Sonicwall's Global VPN client for our remote workers, but we're considering moving away from it due to some security and performance issues. Our requirement to stick with Sonicwall for our firewalls is set in stone, so that's not changing. Until recently, the VPN was only used by a handful of users, mostly accessing a VDI desktop. However, as we've transitioned to allowing everyone to work on their own devices remotely, we've seen an increase in VPN use.
Remote access users need to connect to internal file servers (mostly using hostnames), about 30 printers at different sites, some SQL servers for specific applications, and a few partner connections via site-to-site VPNs which currently come from our datacenter. We want to limit access to collaborative functionality only when users are remote.
I manage the backend and am seeking guidance on solutions. I'm considering Tailscale, Entra Private Access (since we're using MS 365), or maybe something based on full Zero Trust Network Access (ZTNA) like OpenZiti. I'm looking for solutions that would offer the best value, require the least maintenance, and be straightforward for our users, all while integrating with our existing Windows clients with Microsoft 365 E3 accounts.
5 Answers
Definitely look into MS Entra (formerly known as GSA). It's user-friendly and can integrate well with Microsoft 365; just check if it's included with your E3, though I've heard it might not be.
Have you thought about using SSH tunnels for part of your setup? It might not give you the best performance or user experience, but it could be a quick hack for some connections until you find a more robust solution.
From my experience, there’s no magic bullet here. SQL can be a real nightmare over high latency connections. If the workload is latency-sensitive, I might suggest sticking with VDI for those tasks. Also, remember that you can configure ACLs with most VPN platforms, so security issues often stem from configuration rather than the solution itself.
If you’re worried about security, ZTNA solutions like Zscaler have their pros and cons. It's important to remember though, that Tailscale and similar options still connect devices to a network - they just make it more secure. For your use case, consider separating partner access and internal workloads to ensure efficiency.
We’ve been using Tailscale, and it’s totally awesome! It’s super flexible and really easy to configure. However, just keep in mind that licensing for ACLs can get pricey if you need that level of control.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures