Cybersecurity specialist at a tech services company with 1,001-5,000 employees
Reseller
Jan 5, 2022
I have worked on Pulse VPN (Now Ivanti), can say it will beat OpenVPN any day. With Palo Alto there are advantages with Pulse, it being a dedicated VPN solution, has purpose-built hardware. And from a software features perspective, it has a best-in-class Host Checker (also known as compliance or posture checker).
So, any user that connects remotely must also comply with specific IT policies.
Say, Antivirus firmware version should be no more than N-3, and the last scan within last 10 days, PC must be from a specific domain, should have or not have certain processes/applications running, while connecting over VPN.
This check will happen before and you can either block or alert users that they are not compliant. Also, post connection it can continuously run checks and let's say the moment a banned application is opened, they are disconnected.
And it also ensures the user is highly likely a genuine user that someone who somehow managed to get employee credentials. So you are doing identity + device check using one feature.
Ivanti comes from a strong endpoint and asset management background and has integrated a lot of endpoint-specific features in the VPN solution - Connect Secure. I haven't worked on it, but the new firmware is said to have automated workflows for day-to-day tasks, to improve operational efficiency, something every solution must have in the next decade.
An SSL VPN is a secure remote access solution that uses the Secure Sockets Layer protocol to encrypt and authenticate connections, allowing users to access network resources safely from anywhere using a web browser.SSL VPN offers reliable security for remote workers, providing simplicity in deployment and use. It eliminates the need for dedicated client software, making it easier for organizations to maintain. This flexibility supports various devices such as PCs, tablets, and smartphones,...
I have worked on Pulse VPN (Now Ivanti), can say it will beat OpenVPN any day. With Palo Alto there are advantages with Pulse, it being a dedicated VPN solution, has purpose-built hardware. And from a software features perspective, it has a best-in-class Host Checker (also known as compliance or posture checker).
So, any user that connects remotely must also comply with specific IT policies.
Say, Antivirus firmware version should be no more than N-3, and the last scan within last 10 days, PC must be from a specific domain, should have or not have certain processes/applications running, while connecting over VPN.
This check will happen before and you can either block or alert users that they are not compliant. Also, post connection it can continuously run checks and let's say the moment a banned application is opened, they are disconnected.
And it also ensures the user is highly likely a genuine user that someone who somehow managed to get employee credentials. So you are doing identity + device check using one feature.
Ivanti comes from a strong endpoint and asset management background and has integrated a lot of endpoint-specific features in the VPN solution - Connect Secure.
I haven't worked on it, but the new firmware is said to have automated workflows for day-to-day tasks, to improve operational efficiency, something every solution must have in the next decade.