Question about VPN solutions

[ForumKid]

Quick question about VPN solutions.
We are currently running MS Server 2003 in order for offices to connect to a corporate server for VPN. The peformance with using microsoft server 2003 as a VPN solution is slow.

My question is this:
1) Will there be a significant performance increase if I turn off VPN on the server 2003 and have users VPN into the PIX?
2) Is it a better idea to introduce a cisco 3000 concentrator or something like that? Will doing something like that greatly increase vpn speed?

Thanks

 

[computerhighguy]

You will get a performance and security increase by using the PIX (or the VPN 3000) assuming they are sized properly for your environment. The PIX will work, but it hard to troubleshoot.

The VPN 3000 is a little harder to understand at first, but has many, MANY tools for troubleshooting and in my opinion is a much better platform for VPN, especially if you have a problem. Eventually, you will have an issue, where you need to troubleshoot a VPN problem.


It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)

 

[Dimpa1]

If you never worked with concentrator, I recommend the pix, it is actually a cleaner set up and as for troubleshooting, to me, it is easier than the conc. Concentrator however will give you more options to set up your vpn. If it is just a simple vpn connection, like pix to client, I would use the pix. If you have more than 20 users logging in at the same time than go with the concentrator.

PIX to VPN Client:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009442e.shtml

"Unemployed

 

[ForumKid]

Thanks so much. That clears up a lot. There will definitely be more than 20 users connected at the same time. I will do a bit more research on the concentrator. I'm not scared to learn somethign new . I just want it to perform as best as possible.

 

[themut]

If you have a large number of VPN clients then the VPN3000 is the way to go if not the PIX would be a better option. The VPN3000 is actually pretty easy to configure once you get the hang of it and the debugs give more information than needed.

 

[dearingkr]

I just picked up a VPN concentrator 3005.
Setting it up was a breeze. Just used the quick start guide.
There are many, many more settings to play with, but setting it up for basic client (WinXP VPN) access is no problem.
Now I'm going to start on LAN-to-LAN VPNs...

MCSE CCNA CCDA