Hacker News Reader

It's not VPN vs. no VPN. It's crapware like Ivanti and Zscaler vs. sane things like OpenVPN and WireGuard.

Maybe I've missed it (very likely), is there an enterprise-grade product that allows easy management of WireGuard or OpenVPN for say 20-30k users/endpoints and that integrates easily with Active Directory and a centralized MFA provider? Do these products provide support agreements?

To be fair, I have no love for Ivanti or Zscaler, but I do understand why companies choose them over some standalone, open source products.

Tailscale? Unless I'm misunderstanding the use-case (which I probably am)

Tailscale et al probably doesn't give kickbacks on large contracts like Ivanti et al do.

vpn its just small part of what zscaler does. its a bunch of security related products

Yes, but the VPN is the only useful part. The rest is what makes it crapware.

the rest is what companies need and pay money for. vpn is door opener

This is the question I heard constantly when I was working in IT.

You know what it led to? Us using trash like Ivanti and Solarwinds.

My advice tends to be using SASE things like AppProxy - you can have your less-than-stellar enterprise business apps exposed outside of the LAN without putting them up as a target on the public internet

Reply on news.ycombinator.com