Well if they only have DCs, exposing them to the Internet with RRAS is a pretty terrible idea. An RRAS machine should generally be in a DMZ, they may not have a spare Win Server license to do this. Also, maybe just my opinion but RRAS is hot trash. You could buy a PA-220 for cheaper than a Win Server standard license.
yes just a tunnel , like users are sitting on the local network. Only about 5 but could go to 20 if things work out
How many concurrent users could a Raspberry Pi service ?
Not to say anything against PA, but for a non profit a used FortiGate will provide better performance for the cost.
A 60E could be gotten for as little as $200, and pushes multi-gig IPsec performance. No licenses.
Tried to checkout Zscaler , I’m guessing vpn-retirement would be the solution/product ?
You missed the bit about no money.
i checked techsoupcanada.com — nothing there sadly
thanks for the input , there is only 1 server license and it’s hosting 2 hyper-v VMs running server .
checking out the PA-220
Most I’ve tried with is 5, and it was fine but I’m sure you can do lots more. As with everything in I.T. the answer is “it depends”.
Yeah thats another good choice as well.
Good. Add 3rd VM, install pfsense, enable OpenVPN server. All for free.
This is what we use at work, strictly as an sslvpn box. We do have the GlobalProtect subscription license added, but I don’t think the subscription it’s required for basic globalprotect sslvpn. There are also no user license costs. The subscription just adds some features I think.