SSL VPNs or IPSec for Remote Access

Document Sample
SSL VPNs or IPSec for Remote Access Powered By Docstoc
					                                                                                Aventail White Paper

ROI Comparison: SSL VPNs or IPSec for Remote Access?

Executive summary
Today’s distributed workforce demands more secure access, to more resources, from more remote
locations. Recent Gartner data suggests that by 2008, SSL VPNs will be the primary access method
for more than two-thirds of business employees who work remotely.1 Now is the time to evaluate the
increased ROI and other benefits you could receive by replacing your existing IPSec VPN with an SSL
VPN solution.
This white paper provides a working methodology to help you determine your annual return on investment
(ROI) from implementing Aventail SSL VPNs as a replacement solution for your existing IPSec VPN. It
also demonstrates this ROI in two real-world scenarios, one deploying Aventail’s SSL VPN to mobile
employees, the other expanding deployment to your business partners over an extranet.
You can easily determine custom ROI findings based on your own specific needs by using Aventail’s
complementary SSL VPN ROI Calculator, located at
Return on investment is your annual benefit divided by your investment amount.2 By replacing your IPSec
VPN with SSL VPN, you will see bottom-line benefits in the areas of operations (including both help desk
support and provisioning), security, productivity, and business partner collaboration.
As detailed in our real-world scenarios below, by upgrading only 1,000 IPSec VPN users3 to SSL
VPN, over three years you could expect operational benefits of $115,200 and productivity benefits of
$3,600,000, for total of $3,715,200. By extending SSL VPN to 1,000 of your business partners over
an extranet, you could also add additional collaborative benefits of $300,000, resulting in cumulative
benefits of $4,015,200.
Finally, the more IPSec VPN users you upgrade to Aventail SSL VPN, the less you spend per user license.
By increasing deployed replacement from those 1,000 users to 5,000 users, for instance, you could see
cumulative savings of over $200,000. While not covered here, your analysis will also want to consider
qualitative benefits, such as increased user satisfaction.

ROI Comparison: SSL VPNs or IPSec for Remote Access?                                                Page 1
                                                                                                                  Aventail White Paper

Scenario One: Replacing your IPSec VPN                                Scenario One: Benefits of replacing IPSec with SSL VPN for 1000
with SSL VPN for mobile employees                                     mobile employees
There are significant costs in rolling out IPSec to home              Operations      $115,200           At .3 hours for help desk and .5 hours
computers and other devices not directly managed by                   savings                            for provisioning for each IPSec user,
IT. SSL VPN is dramatically easier and less expensive                                                    at cost of $60/hour, or $48,000/
                                                                                                         year. SSL VPN reduces these costs by
to roll out to remote users. It’s also important to factor                                               80%, saving $38,400 per year, or
in increased productivity. With the SSL VPN, your                                                        $115,200 over
employees can now gain access from everywhere—such                                                       three years.
as from home computers, hotel or airport kiosks—so they
                                                                      Productivity    $3,600,000         At 12 hours gained per user at
will have even more access than with the IPSec VPN. In                savings                            professional rate of $100/hour, over
this example, the SSL VPN ensures that your employees                                                    three years.
are significantly more productive from all environments.
                                                                      Scenario        $3,715,200
Operational benefits                                                   total:
The operational benefits you receive from implementing
SSL VPN include reduced costs for help desk and                                  benefits. For these scenarios, we conservatively estimate an
provisioning. These scenarios estimate .3 hours for help desk                    increased productivity benefit of twelve hours per user at $100/
support, and .5 hours for provisioning for each IPSec user                       hour, or $1,200,000 per year, totaling $3,600,000 over three
per year, at $60 per hour, for an ongoing cost of $48,000.                       years. Other ancillary may benefits include faster time-to-market,
However, with SSL VPN, these help desk and provisioning times                    increased responsiveness to customers, enhanced reputation,
are reduced by 80%, because all that is required is setting up                   and reduced attrition of internal staff.
clientless access through a portal. This cost reduction saves
                                                                                 Security benefits
$38,400 per year, or $115,200 over three years.
                                                                                 While less quantifiable, you should also consider the added
Productivity benefits                                                             security benefits of an SSL VPN. IPSec either allows access to
By replacing your IPSec VPN with an SSL VPN, you increase                        your network or denies it. The open IPSec tunnel poses a risk
productivity by allowing users easier access to more corporate                   because all users can potentially access sensitive resources.
resources from more locations and devices, without interaction                   Exploited, that vulnerability could result in system downtime,
with IT. These users could be comprised of executive, sales,                     financial or information theft, and possible negative publicity
technical, consulting, and healthcare professional staff, where                  and damage to corporate reputation. SSL VPNs eliminate that
even incremental increases in productivity will result in significant            vulnerability with granular access controls.

Scenario Two: Replacing your IPSec VPN                                Scenario Two: Benefits of replacing IPSec with SSL VPN for 1,000
with an SSL VPN for business partners                                 business partners
Because SSL VPNs are clientless and rules-based—                      Operations       $115,200          At .3 hours for help desk and .5 hours
meaning you get highly granular access control—you can                savings                            for provisioning for each IPSec user,
create a portal for 1,000 of your business partners so                                                   at cost of $60/hour, or $48,000/
                                                                                                         year. SSL VPN reduces these costs by
that they can access only the applications and resources                                                 80%, saving $38,400 per year, or
they need.                                                                                               $115,200 over
                                                                                                         three years.
Business partner benefits
This second scenario builds upon the benefits of                      Productivity     $3,600,000        At 12 hours gained per user at
                                                                      savings                            professional rate of $100/hour, over
Scenario One. It also considers the potential cost savings                                               three years.
and revenue enhancement from having a business
partner extranet, resulting in lower costs and improved               Partner          $300,000          At $100 benefit per business partner
                                                                      benefits                           user per year, over three years.
 Magic Quadrant for SSL VPN, North America, 3Q05. December 8, 2005.   Scenario         $4,015,200
John Girard.
The standard ROI calculation as defined by the Government

Accountability Office.
Using a ratio of total users to concurrent licenses of 5:1.

ROI Comparison: SSL VPNs or IPSec for Remote Access?                                                                                        Page 2
                                                                                                                                                     Aventail White Paper

productivity. This analysis conservatively assumes an additional                                                       • Offer patent-pending Aventail® Smart Tunneling™ technology,
annual benefit of $100 per business partner ($100,000 per                                                                a layer 3 tunnel with layer 4-7 control, for complete
year), based upon fewer missed business opportunities,                                                                   application and network access, full policy control, and
greater speed to market, and eliminated overhead from paper-                                                             simplified management.
based transactions.                                                                                                    • Provide cross-platform Aventail® End Point Control™, so you
                                                                                                                         can ensure maximum control and data protection from any
Economies of scale                                                                                                       remote access location.
An important variable to factor into any ROI calculation is
                                                                                                                    Discover whether you will get similar results in your environment.
economy of scale. This considers that as you widen your
                                                                                                                    You can learn more about the benefits of an SSL VPN over
deployment of Aventail SSL VPN, you see incremental per-user
                                                                                                                    IPSec by downloading our white paper “IPSec vs. SSL VPNs
savings. For example, should you expand your deployment
                                                                                                                    for Secure Remote Access” at
from 1,000 to 5,000 users, your per-user licensing cost would
                                                                                                                    And try the SSL VPN ROI Calculator for yourself at
be reduced by 76%, a savings on licensing of $41 per user,
totaling $205,000. (This analysis factors actual users with a
ratio to concurrent user licenses of 1:5.)                                                                          About Aventail
                                                                                                                    Aventail is the best-of-breed SSL VPN technology company and
                                                                                                                    the authority on secure application access technology. Aventail
In the end, you can see the numbers speak for themselves. An
                                                                                                                    delivered the first SSL VPN solution in 1997, and today, Aventail
SSL VPN solution quickly pays for itself and goes on to reap
                                                                                                                    meets the secure communication needs of more than two million
significant security and productivity benefits. If you go all the
                                                                                                                    end users globally. Aventail’s family of Smart Technology SSL
way with an SSL VPN—extending it not only to a broad group
                                                                                                                    VPN appliances increases productivity for end users and IT
of mobile and home users but to your business partners as
                                                                                                                    professionals, while maximizing security and lowering costs.
well—you get maximum ROI benefits and savings.
                                                                                                                    Aventail SSL VPNs lead the industry in End Point Control, policy
SSL VPNs are expected to become the primary access method                                                           management, and transparent, easy-to-use access options to
for the majority of business employees who work remotely.                                                           the broadest range of applications. Aventail is the SSL VPN
Clearly, organizations are catching on to the cost-savings,                                                         of choice among leading enterprises and service providers
productivity, and security gains to be had through switching to                                                     worldwide, such as AT&T, DuPont, IBM Global Services, MCI,
an SSL VPN. To help you realize these benefits, Aventail’s best-                                                    Netifice, Office Depot, Sanyo, and TNT. For more information,
of-breed SSL VPN appliances:                                                                                        go to
   • Deliver an easy, clientless user experience, and highly
     secure, everywhere access to corporate resources, file
     shares, and applications from virtually any device.
   • Are far easier to deploy and manage than traditional IPSec
     VPN solutions or other SSL VPNs.
   • Ensure productivity that today’s mobile workforce requires
     from all Internet, wireless, and mobile devices.
   • Are the first to provide secure mobile access through a
     single SSL VPN gateway, enabling centralized
     management, enhanced security, and a consistent user
     experience from everywhere.

ROI Comparison: SSL VPNs or IPSec for Remote Access?                                                                                                                   Page 3

                                                                                                                                      Corporate              Aventail Europe Ltd
                                                                                                                                      Headquarters           Tel +44 (0) 870.240.4499
                                                                                                                                      808 Howell Street
©2006 Aventail Corporation. All rights reserved. Aventail, Aventail Cache Control, Aventail End Point Control, Aventail               Seattle, WA 98101
Secure Desktop, Aventail Smart Access, Aventail Smart Policy, Aventail Smart Tunneling, Aventail Unified Policy, and their
                                                                                                                                      Tel 206.215.1111       Aventail Asia-Pacific
respective logos are trademarks, registered trademarks, or service marks of Aventail Corporation. Other product and
company names mentioned are the trademarks of their respective owners.                                                                Fax 206.215.1120       Tel +65 6832.5947

Shared By: