AppGate ZTNA (100-user license)

Appgate SDP is used for user connectivity both in the office and outside the office for remote connectivity. When outside the office, we connect to office resources, and when in the office, we connect to Appgate SDP before accessing our resources. This provides a zero trust approach to security.

Compared to Cisco AnyConnect, Appgate SDP is lighter and offers perfect support that is always timely. The moment a ticket is raised, it receives immediate attention. The application discovery feature is effective, and the IoT connectors are particularly valuable. These connectors allow us to enforce security policies on devices where we cannot install the Appgate SDP clients, such as desk phones, cameras, and printers.

Previously, with AnyConnect, we experienced frequent issues. In comparison to that solution, we have seen significant improvement and minimum downtime.

Appgate SDP support is always available to assist, which is the primary strength. However, there are areas for improvement. When a user is unable to connect, the platform should display detailed information such as the user's IP address, MAC address, and specific reasons for connection failure. Currently, aside from invalid username and password errors, Appgate SDP provides generic errors related to policy, such as a policy admin error. The system should provide deeper diagnostics to explain why a user cannot connect.

The dashboard could also be enhanced with additional features and logins to provide better visibility. Sometimes there is no immediate clarity about what is happening. After using Appgate SDP for a long time and experiencing various errors, we have learned where to investigate, but this would be problematic for new users trying to resolve issues. The dashboard could display user connection times, failure reasons, and other relevant information.

The user activity logs and accounting features should be improved in particular.

Appgate SDP has been in use for approximately four years.

There is a single point of failure as only Appgate SDP is being used. There have been one or two instances of downtime approximately two years ago. The issue involved a CPU reaching 100% utilization, but this was internal and network-related rather than an issue with Appgate SDP itself.

Appgate SDP is very scalable.

Appgate SDP is currently in use. Before a user connects to Appgate SDP, several checks are performed through created policies. There is a policy for MacBooks, another for Linux, and another for Windows. On Windows, the system verifies that antivirus is installed and up to date, that Windows is updated, and that other security measures such as SentinelOne are installed. Many requirements must be met before a user is able to connect.

Initially, Cisco AnyConnect was used. Compared to Cisco AnyConnect, Appgate SDP is lighter, and the support is perfect.

Previously with Cisco AnyConnect, we experienced frequent issues. In comparison, we have seen significant improvement and minimum downtime.

The initial setup was not complicated because everything was explained in detail, including the different approaches available. The implementation team explained which approaches were recommended and which ones were preferred. When they noticed concerns with a particular approach, they provided best practices and guidance.

The implementation team consisted of approximately 19 or 20 members, and I was part of that team.

The contract with the previous vendor expired, and MTN Group decided to switch vendors after working with Cisco for many years. Appgate SDP won the RFP at that time, so the decision to work with them was made at the group level rather than by our team specifically.

My main use case for Appgate SDP is for security purposes. We are trying to use it to connect with our VPNs and the network so that we can improve our organization's security.

A specific example of how we use Appgate SDP for security and with our VPNs is that Danfoss security team has implemented a no-trust policy, requiring everybody to install Appgate SDP with a default account. Whenever we start our system, it will automatically connect to the different VPNs through which our network is going. If it is disabled, we are unable to access the internet, as all our network goes through a firewall. If Appgate SDP is not connected to all of the VPNs, then we are not able to browse the internet.

In my experience, the best features Appgate SDP offers are reliable connectivity across different environments and strong policy-based access.

When I mention strong policy-based features, I mean that if I want to secure all the systems in my organization, I can apply a particular policy through which all the network has to go, making it easy to implement security compliance throughout the organization.

Appgate SDP has positively impacted my organization, as we are using it to securely access the internet after the cyber attack. After the implementation of Appgate SDP, I did not hear about any security incidents.

If I could change or improve anything about Appgate SDP, it would be to enhance the user experience by improving the UI so that it is more explanatory. Currently, the UI feels as though it is doing something behind the scenes, and at first sight, nobody can understand what this application is for. I think that is the main thing regarding needed improvements.

I have been using Appgate SDP for around two years.

My experience with pricing, setup cost, and licensing is that this whole thing is managed by the security team, and there are different teams involved, so I do not have knowledge about cost. I think it is important for security because if a security incident happens, you lose more money than you save.

I do not have anything else to add about my main use case or how it is set up for my team. I do not have anything else about the features I find valuable.

My advice for others looking into using Appgate SDP is to use it, as it is a good application.

We use Appgate SDP as a substitute for traditional VPN.

They could provide a single-box solution to manage tools for 4000 users. Additionally, they could add extra features to enhance remote micro connection.

We have been using Appgate SDP for two years.

I rate the product’s stability a ten out of ten.

The product encountered challenges accommodating the first 1000 users. We had to manage them individually, each with its unique code.

I rate the scalability a nine out of ten.

Our experience with Appgate SDP's customer service and support has been generally positive. While we haven't encountered any critical problems requiring urgent resolution, the response to inquiries and questions has been satisfactory. They answer the queries shortly.

The initial setup is complex for users who need to gain specific knowledge about the process. Once they grasp the knowledge, it is easy to deploy. It takes approximately two months to complete. At the moment, Appgate team is maintaining the product for us.

Appgate SDP has significantly streamlined our access management, providing a notably efficient solution compared to traditional VPNs. The simplicity of the SDP platform is a standout feature; instead of navigating through intricate details, users can seamlessly connect to the company's network or switch to the internet with minimal effort, unlike VPNs which often involve waiting for connection handling and unblocking. Recognizing the robustness of SDP, we made strategic decisions to minimize reliance on VPNs, reserving only two for administrative purposes.

In a scenario where Appgate SDP significantly improved our network security posture, the platform played a crucial role in fortifying defenses against major threats. The encryption algorithms utilized by SDP provide a high level of security to our network architecture.

Compared to Cisco, SDP proves to be most critical in protecting resources with the help of role-based policies. It only provides selective access to the application.

The dynamic policy engine significantly enhances our access control mechanisms. It has single sign-on and multifactor authentication features. It makes processes faster and easier.

It has helped our IT team to manage the workload with ease. It gives an intelligent solution whenever they face traffic-related problems.

I rate it a nine out of ten.

I worked with the access of the NAC products for the last twenty years, and then there was a shift to cloud connection, and products like Appgate SDP were being used because the parameter was out, and we needed to understand how to connect the application in the hybrid work mode.

Firstly, the granularity feature of the solution allows it to build granular rules to access different applications. Secondly, the capacity to view the connection is another valuable feature of the solution.

The user interface should be improved as it is not very easy to work with the updates.

I have been using Appgate SDP for five years.

In my lab environment, the stability is very good.

It is a scalable solution.

I directly contact Appgate's technical support and seek guidance from them. The support answers your questions very fast. I rate the technical support a nine out of ten.

For the initial setup, one needs to know if they want to configure the solution. It is not intuitive. When I started with the solution, it was not very easy, so I will rate the setup phase a five out of ten. After studying it and finding it easy now, I rate the initial setup an eight out of ten.

I only have a relation with the update in the lab environment, not the deployment.

The pricing is according to the market price. It is not a very cheap solution. They have some very aggressive promotions to sell the product in the market.

Firstly, one needs to understand the difference between a conventional VPN and Appgate because the application needs to have a one-on-one interaction with the user. The network view is the second step of the VPN, while the first is the interaction. Secondly, for the security of the solution, you need to generate a hard panel between the application and the user.

It is a good product. I rate the overall solution a nine out of ten.