VPN sizing and licesing

[ITWombat]

Do IPSEC and SSL VPN servers need partiuclar hardware requirements or is it mainly browser based SSL VPN solutions (.e.g SSL Explorer) where server performance under load might be an issue?

 

Do you have to buy extra CALs for file, mail and database servers as with terminal server accessed from outside the school LAN?

[Geoff]

You can buy dedicated hardware to 'accelerate' the encryption and thus get more performance (so basically more concurrent users) from the same hardware. However, you're talking several hundred pounds for a SSL accelerator card for example.

 

You will need extra set of CALs for each extra connection.

[ITWombat]

Thanks Geoff. I kind of suspected that was the case. So it would be major outlay to spread remote access beyond a few key staff to all staff and students.

 

SSL Explorer may need more capable hardware as it uses a web server, Jetty, implemented in Java rather than a native one such as Apache.

 

As for remote access CALs does this also apply to WebDAV access to file severs?

[Ric_]

WebDAV does not require more CALs... I double-checked this recently... I believe that it is because it is pitifully slow and so they couldn't really justify selling CALs for it.

 

Some technologies, e.g. Terminal Services and OWA, have External Connector Licenses which are a cheaper way to roll out remote access than licensing every user.

[tom_newton]

IPSec VPN does not require any particular grunt - StrongSWAN or similar on Linux will easily saturate a 100Mbit link on a modern server.

[PiqueABoo]

StrongSWAN or similar on Linux will easily saturate a 100Mbit link on a modern server.

 

Insufficient information. Will easily saturate the link when running how many tunnels simultaneously?