SG-4860 // VPN Access for Multiple Autodesk Vault Users

[cwagz]

I have been using pfSense at home for many years but wanted to bounce a few questions off you guys before recommending a solution for the company I work with.

Currently the business I am working with is using an Asus router to provide IPSec VPN access for up to 4 concurrent users accessing an Autodesk Vault Server.  The internet connection is cable at 100mbps.  I believe we are limited by the processor speed of the Asus router.  We periodically experience unacceptable performance from the VPN with Inventor being practically unusable while connected to the Vault.

Would a SG-4860 be able to provide VPN access to 6 or more concurrent users with good speed and latency?

Is it possible to provide equal bandwidth to each VPN client connected to pfSense?

Does OpenVPN provide a performance improvement over IPSec?  Which would be preferred for this type of application?  Currently we just set the VPN up through Windows without a special client being needed.

We would be purchasing from Netgate and buying a support package as well.

Thank you for any feedback.

[ivor]

Would a SG-4860 be able to provide VPN access to 6 or more concurrent users with good speed and latency?

What kind of Internet connection do you have? Unless you expect each connection to have 1Gbps VPN throughput, SG-4860 is a great choice.

Does OpenVPN provide a performance improvement over IPSec?

IPsec is faster. Things change in favor of OpenVPN with pfSense 2.4 due to AES-NI support, however IPsec is still faster.

Is it possible to provide equal bandwidth to each VPN client connected to pfSense?

Yes, there's a few ways to achieve that.

Which would be preferred for this type of application?

OpenVPN is a great way for quick and pretty much pain-free VPN deployment. I'm interested in your internet speeds to make a final recommendation.

[cwagz]

Thanks for the quick response.

The server has a 100mbps connection to the Internet.

The clients vary between 100mbps to 150mbps

Would we be able to get assistance with the Traffic Shapping with the support package?

[cwagz]

One other thing.

With IPSec being faster is my assumption that the Asus router does not have enough processing speed to keep up with multiple VPN connections accurate?

Thank you.

[ivor]

I don't know your router model but I'm guessing our SG-4860 won't be bottleneck in your setup :) If your Asus router is too slow you can always install IPsec or OpenVPN clients directly on remote user's devices.