VPN costs: appliances versus servers
Published: 21 May 2002 10:43 BST
Microsoft, Novell, UNIX, AS400, and Linux are all capable of providing VPN services (granted, some better than others). Chances are you run one of these common operating systems in your organisation today and are very familiar with them. This can be a tremendous cost benefit to organisations that do not have an existing firewall or router with VPN capabilities.
The integration of VPN services into the operating system means that IT professionals who work with these operating systems are already familiar with how to navigate these systems and do not have to worry about learning a new product. Since most VPN appliances do not integrate well with existing networks, using servers for VPN services often means greater integration with the network, particularly in the area of authentication. Microsoft-centric organisations can take advantage of the seamless integration Windows 2000 and possibly ISA Server has to offer when creating VPNs in conjunction with Active Directory, certificates, and smart cards. Client computers or sites that run current Microsoft operating systems will not encounter proprietary VPN issues or require an install of separate VPN client software.
Here's where the cost benefits of using a VPN server stop. The issues of security, reliability, and cost stand out when evaluating a server-based VPN solution. There should be no surprise that a hardware-based VPN solution brings a greater degree of reliability and security than one built around a server operating system such as Microsoft. The same is true in the case of firewalls and routers. The cost associated with maintaining security patches and basic server administration add up on a monthly basis. Additionally, the cost of building a VPN server solution can run in excess of $2,500 once the costs of hardware and software are added (although Linux does offer some exceptions).
The managed option
Traditionally, VPN solutions could be categorized in one of only two areas: VPN appliances or VPN servers. Today, the introduction of managed service providers has created a third possible solution. Well-known vendors such as WorldCom, Quest, and AT&T are now offering regional, nationwide, and even international managed VPN services. This service allows companies to have an enterprisewide VPN solution without a heavy investment in infrastructure or personnel. Most managed VPN providers will monitor your organisation's VPN connections 24/7 to ensure they are available at the times when your remote users may need it most. Pricing varies but generally starts around $200 per month, per location and often includes managed firewall services and service level agreements as well.
VPNs are permitting organisations to establish secure, end-to-end, private network connections over the Internet while reducing communication costs. Implementing and maintaining VPNs requires choosing the right solution and an in-depth understanding of public network security issues. Whether you are looking at a VPN appliance, server, or managed service provider, performing proper cost/benefit analyses can be the most important step in a successful VPN solution.
Have your say instantly in the Tech Update forum.
Find out what's where in the new Tech Update with our Guided Tour.
Let the editors know what you think in the Mailroom.








