EXPERT RESPONSE
As with any cost scenario, many of the variables depend upon how you choose to implement the VPN and what equipment you already have on hand. If, for example, you're already operating IPsec-capable firewalls at both sites, and they have enough excess capacity to handle the VPN traffic, you may be able to get by with a negligible investment of additional resources. On the other hand, if you're creating a large number of tunnels, or if you need to purchase additional VPN equipment, the costs can quickly mount.
Consider the case of the Cisco Systems Inc.'s VPN Concentrators. The networking giant's entry-level model, the VPN 3005, can handle 4 Mbps of throughput divided among up to 100 different site-to-site tunnels. You can buy the product for a couple of thousand dollars. As with most networking products, expect to spend about 15-20% of that money on annual support and maintenance.
Regarding staff resources, IPsec VPN tunnels tend to be fairly low maintenance. Technology exists to automatically reestablish broken sessions, and technical support is rarely needed for site-to-site VPNs. I've seen connections remain established for months without a hitch.
More information:
Learn why Microsoft Vista and VPNs don't always mix.
Do split-tunneling features make a VPN vulnerable? Mike Chapple explains.
|
