It’s a hosted vpn.
post
Hadn't heard of it, reading up on it I think my employer (a very large company) has already implemented a form of it effectively. For us it's taken the form of a trusted auth service for all of our internal websites/services with everything now being directly Internet facing. This means that you can access (almost) everything without a VPN from anywhere, and it removes the idea of "internal" traffic being trustworthy. It's mostly been pretty nice from a user perspective.
It also sounds like a buzzword that a lot of companies are trying to use to sell you bundles of saas products.
Thank you! The whole thing feels like another "the cloud", or "AI" push, and I instantly distrust anything that leverages fear as a sales tool. From what I'm seeing, it feels like there's potential for improving the user experience, so I'm glad to hear that aligns with your perspective!
Avoid Sonicwall
Yeah? Is that experience talking?
Yes. Even setting DHCP scopes and opening/forwarding ports is a pain in the ass compared to others like meraki. Should just be a click, not 14 steps.
Much like Zero Trust it looks like a framework on providing access to privileged information based on policies. Looks to integrate zero trust with a cloud firewall and session broker.
Where I'm trying to get is, zero-trust being a good framework, does it make sense to go with SW's proposal, or can I do it myself for less/no cost with other solutions out there? It seems like MS has an offering under "Global Secure Access" that might be bundled in with Office365 premium, so I've started focusing there...
Dell product and dell is currently circling the drain.
Dell dropped SonicWall in 2016. SonicWall is owned by private equity now.
Didn't know that. I haven't had to support it all since 2018.
Yeah, we switched all our clients to meraki and some on ubiquiti, depending on their budget and user counts. I personally use ubiquiti gateways/switches/waps at home and love it.
I use ubiquity AP's at the house but I run pfsense for my router. The unifi gateways I've dealt with were buggy. Of course its been at least five years since I've touched one of those and they may be more stable now.
Mines a little old, ran into a few bugs, but nothing detrimental. I don't know much about the new ones like the wall mounted ones. Mine are all rack mount.

Like I said the problems I had have probably been addressed. Ubiquity has always been pretty diligent about keeping their products working as advertised.
I have the pfsense plus routers at work and one thing I like about them is the selection of tunnel options and the really great filter. Unifi controllers have though been increasingly require their gateways to function in full. That kind of forced integration is a strike in my book.
My employer is not using Sonicwalls solution, but a home grown proprietary solution.
But please don't take that as evidence in favor of doing it yourself - their capability in this area is atypical.
My customer is a mid-large size environment with not a lot of tech-savvy folk who are always frustrated with additional security, so anything that would decrease the number of MFA pushes passwords they have to remember would be a win. For that matter, decreasing the number of hours spent admin-ing those things is also desireable. Currently, we're just using simple SSL VPN to access on-prem file/print services.
all 24 comments