Review: Draytek Vigor 2955 SSL VPN firewall
A powerful but keenly-priced dual-WAN remote access solution
Review details
HideOur verdict
If you've outgrown your entry-level VPN hardware and want to move up to using SSL VPN technology, the Vigor 2955 could be the ideal next step. It's competitively priced for what you get, and has plenty of power in reserve.
Pros:
Up to 200 concurrent VPN tunnels; three WAN interfaces including 3G.
Cons:
Less technical users could have a steep learning curve; no context-sensitive help; Windows 7 and Vista clients might need client software installing depending on security settings.
Price:
£ 359
Manufacturer:
The rise in popularity of teleworking and other remote access applications makes it hardly surprising that SSL VPNs have proved a godsend to many companies with a distributed workforce.
Aimed at SMEs needing an all-in-one remote access and internet connectivity solution, the Draytek Vigor 2955 is a combination dual-WAN router, advanced firewall and hardware-accelerated SSL VPN appliance supporting up to 200 concurrent VPN tunnels.
Physically, the Vigor 2955 is solidly built and is housed in an all-metal case. All network ports - five Gigabit Ethernet LAN ports and two 10/100Mbit/s WAN ports - are at the front. Rack-mounting brackets are included in the box.
A single USB port allows use of a 3G dongle for additional WAN redundancy, or alternatively it can be used for attaching hard drives or printers. Any two of the three WAN ports can be enabled at once, and can work in failover/failback mode (which it does very smoothly) or using automatic or rules-based load balancing to route different types of traffic down different WAN interfaces.
Help and support
As usual with Draytek, support documentation is not lacking, although it does sometimes suffer from clunky English. Detailed application notes, FAQs and guides are freely available on the Draytek web site. With lots of practical examples and tips, these are an invaluable resource for those just getting to grips with VPN technology.
Setting up VPN users (up to 200 can be created) is simple using the web management interface. For SSL VPNs you can configure three built-in services: VNC or RDP remote desktops and Samba file sharing.
Once you've configured an application, adding it to a user's profile is a simple check-box process. Users can be authenticated locally, or using Radius or LDAP. Mobile One-Time Passwords are also supported using a free application for Java-enabled phones.
