Meraki MX or ASA for Cleint VPN? Need for 50 users concurrent session with Security

[usha.sati]

Hi I am looking for Client VPN for 50 users, which one should I go with, Meraki or ASA.

[dwarika.ratturi@ingrammicro.co · Accepted solution]

Hi,

You may go with Anyconnect with ASA55XX firewall, it will provide you SSL VPN with enhanced security features, however there are per user based license for the same.

For Meraki, you will get L2TP Client VPN, without any additional costs, also it is clientless VPN, which can be directly configured into the device, please follow below link.

https://documentation.meraki.com/MX/Client_VPN/Client_VPN_Overview

https://www.cisco.com/c/en/us/support/security/anyconnect-secure-mobility-client/tsd-products-support-series-home.html

[Philip D'Ath]

I agree.  For Client VPN AnyConnect on ASA is far superior to L2TP over IPSec offered by the Meraki MX.

[contrerasr]

Hi Phillip, 

I remember you mentioning in the meraki forum, using a MX behind an ASA which only serves as Anyconnect VPN termination. Have you had any issues with this approach or caveats? I have encounter an opportunity that would require something like this to be set up. 

[Philip D'Ath]

More typically I have the ASA configured for AnyConnect only sitting behind the MX (the ASA runs on a "stick" and has tcp/443 and udp/443  NATed through to it).