Review: Draytek Vigor 2955 SSL VPN firewall

The rise in popularity of teleworking and other remote access applications makes it hardly surprising that SSL VPNs have proved a godsend to many companies with a distributed workforce.

Aimed at SMEs needing an all-in-one remote access and internet connectivity solution, the Draytek Vigor 2955 is a combination dual-WAN router, advanced firewall and hardware-accelerated SSL VPN appliance supporting up to 200 concurrent VPN tunnels.

Physically, the Vigor 2955 is solidly built and is housed in an all-metal case. All network ports - five Gigabit Ethernet LAN ports and two 10/100Mbit/s WAN ports - are at the front. Rack-mounting brackets are included in the box.

A single USB port allows use of a 3G dongle for additional WAN redundancy, or alternatively it can be used for attaching hard drives or printers. Any two of the three WAN ports can be enabled at once, and can work in failover/failback mode (which it does very smoothly) or using automatic or rules-based load balancing to route different types of traffic down different WAN interfaces.

Help and support
As usual with Draytek, support documentation is not lacking, although it does sometimes suffer from clunky English. Detailed application notes, FAQs and guides are freely available on the Draytek web site. With lots of practical examples and tips, these are an invaluable resource for those just getting to grips with VPN technology.

Setting up VPN users (up to 200 can be created) is simple using the web management interface. For SSL VPNs you can configure three built-in services: VNC or RDP remote desktops and Samba file sharing.

Once you've configured an application, adding it to a user's profile is a simple check-box process. Users can be authenticated locally, or using Radius or LDAP. Mobile One-Time Passwords are also supported using a free application for Java-enabled phones.