• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 480
  • Last Modified:

VPN Router Throughputs - which one is best?

I run a network that has 7 different offices and a central office where I am now.  Each office is connected to the central office via VPN and they all have just the regular Netgear FVS114 Prosafe VPN Routers.  I have always used 3DES for the encryption method but I just today saw on Netgear's website that the throughput for VPNs over 3DES is only 2.1 Mbps!  I feel like a total idiot that I'm a network guy and I didn't realize VPN's have a significantly lower throughput than what the regular internet connection would be at that particular location.  Some of these locations have a 15mbps down/up internet connection and now it makes sense why their connection to us here at the central office sucks.

My question is:    Is there a VPN firewall out there that is cheap/affordable that also has a decent amount of throughput?  Or, is there a way to get a significantly higher amount of throughput with the model I already have (FVS114 Netgear) by using a different encryption method?  I'm sad to say I've just never realized there was such a drop in total throughput with VPN's so I feel I should ask people who have more experience than me.  Thanks guys!
0
tphelps19
Asked:
tphelps19
1 Solution
 
Erik BjersPrincipal Systems AdministratorCommented:
first off 3DES is an outdated encryption technology change to AES128 or AES256

Second you can look at Cisco ASA devices or SonicWALL TZ or NSA series appliances but you will need to look at and compare the specifications for each one to determine what is best for your environment.  Any netgear product is not going to provide sufficient VPN throughput.  

eb
0
 
willbaclimonCommented:
Also Juniper
0
 
tphelps19IT ManagerAuthor Commented:
Any other manufacturers anyone would recommend?  We don't need anything hardcore, just basic routing and VPN...
0
Worried about phishing attacks?

90% of attacks start with a phish. It’s critical that IT admins and MSSPs have the right security in place to protect their end users from these phishing attacks. Check out our latest feature brief for tips and tricks to keep your employees off a hackers line!

 
ffleismaSenior Network EngineerCommented:
cisco ASA are expensive and considering you requirement, i'd say go with juniper or sonic wall. also you can use other unknown brands. i copied a link below for you to check out.

http://www.qno.com.tw/english/n_products_multiwan_vpn_security_router.asp

changing the encryption mode to AES128 or AES256 will consume more bandwidth, the better the encryption the more overhead it produces on you bandwidth. changing to lower encryption method like from 3DES to DES will improve VPN throughput put will give you a less secure connection, just strike a balance to what you need.

hope it hepls :-)
0
 
ffleismaSenior Network EngineerCommented:
you can also check out product line of cisco that can do VPN, i've search and found the link below that shows VPN throughput for each device.

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6635/ps7180/prod_brochure09186a00801f0a72_ps8768_Products_Brochure.html

hope this helps :-)
0
 
tphelps19IT ManagerAuthor Commented:
Thanks so much!  Kind of wish they were a little cheaper, or for that price they were a router too!  Thanks again...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now