[NEBULA] Nebula NSG or onsite USG for VPN tunnels?

StevieG

I am looking at recommending a solution for an existing client who needs some of their users to gain access into their office from random locations. Therefore site to site VPN tunnels are out of the question but my question is 
which is best:
Nebula L2TP over IPSEC with NSG gateways or using SSL VPN with SecuExtender onto a USG firewall?

Also does anybody know how many L2TP VPN licences are built in to the NGG50/NSG100 devices?

Alfonso

HI @StevieG

NSG50: 10 simultaneous VPN
NSG100: 40 simultaneous VPN

You can review specifications at:

https://www.zyxel.com/products_services/Nebula-Cloud-Networking-Security-Gateway-Nebula-Cloud-Managed-Security-Gateways/specification

RUnglaube

I would opt for the Nebula L2TP over IPSEC with NSG gateways for the simple reason that it is over IPSec, way more secure than SSL. Plus, Nebula integrates their cloud authentication making it more simple for account management without the need of a Radius server.

Good luck

Alfonso

HI @StevieG

NSG50: 10 simultaneous VPN
NSG100: 40 simultaneous VPN

You can review specifications at:

https://www.zyxel.com/products_services/Nebula-Cloud-Networking-Security-Gateway-Nebula-Cloud-Managed-Security-Gateways/specification

RUnglaube

I would opt for the Nebula L2TP over IPSEC with NSG gateways for the simple reason that it is over IPSec, way more secure than SSL. Plus, Nebula integrates their cloud authentication making it more simple for account management without the need of a Radius server.

Good luck

StevieG

Thanks to both Alfonso and RUnglaube for your responses.
As you are allowed more licences with the NSG firewalls than the SSL VPN on USG firewalls along with the added security I will be looking into providing an NSG solution for my client.