OpenVPN Access Server / Self-Hosted VPN (BYOL)

My main use case for OpenVPN Access Server  is setting up security in a company where some private resources are not accessible, and some remote employees can use it as well.

A specific example of how I use OpenVPN Access Server  for this purpose is that we gave OpenVPN Access Server access to every employee and put a firewall behind our database, which is only accessible by the VPN.

The best features OpenVPN Access Server offers are ease of setup, and it is just easy. The ease of setup helps my team day-to-day because you set it up once and then you forget about it.

OpenVPN Access Server has a significant positive impact on my organization for security, as it helps a lot.

I think OpenVPN Access Server's setup can be just one click; currently, it takes multiple steps, and when you forget the admin password, you are locked in.

I have been using OpenVPN Access Server for the last five years.

OpenVPN Access Server is stable, definitely.

I don't know how OpenVPN Access Server's scalability is; we only have one instance.

We haven't used customer support for OpenVPN Access Server.

We had another solution, but I cannot share which solution we used before switching to OpenVPN Access Server.

It is easy to install and set up OpenVPN Access Server within my organization, but it could be easier. You just need to set up the application itself, then configure it for your needs. After that, you configure the firewall and distribute it to all the team members, and you're done.

I am not the one who procured this product, as another team is handling it, so I cannot comment on pricing, setup cost, and licensing.

I have seen a return on investment, definitely for security, but I cannot share any metrics.

I am not the one who procured this product, as another team is handling it, so I cannot comment on pricing, setup cost, and licensing.

I did not evaluate other options before choosing OpenVPN Access Server.

My advice to others looking into using OpenVPN Access Server is to just try it. If you don't like it, you don't like it.

I don't know if I am using local, LDAP, RADIUS, PAM, or SAML authentication integration with OpenVPN Access Server.

I don't know if we have utilized the Access Controls feature of OpenVPN Access Server; another team is handling that.

I would describe the user interface of OpenVPN Access Server as not modern, but it works. The user experience could be better with all the statistics and everything.

My impression of the connection speed when using OpenVPN Access Server compared to other VPN solutions is that it is solid compared to others.

I would rate this review seven out of ten.

My main use case for OpenVPN Access Server  is that we have our VPN solution centered around this, and we use it for connecting to different VPNs, whether they be internal private subnets that we configured for specific environments. For accessing those, we specifically use OpenVPN Access Server  for connecting to VPN, then accessing those boxes and other resources, so it basically provides remote access to private networks over the Internet.

A quick specific example of how my team uses OpenVPN Access Server in a day-to-day scenario is that we have a public IP, which is basically our OpenVPN Access Server, over the Internet. Via that, we connect to the VPN tunnel service through the UI agent they provide, and from there, users connect and have access to different private sub-networks, whether they be databases, servers, or Kubernetes  clusters, all of which are behind the VPN. To access those, we connect via OpenVPN Access Server.

I extensively use OpenVPN Access Server for authentication of our backend services, where how it works is when the token generates, we always validate via the correct VPN route. The encryption engine is also very helpful, and as an SRE, I have set this up, so based on that information, I can say that we have used certain protocols to ensure smooth communication between the client and server. It was easier to set up; it is not that difficult, as we just have to provide proper IPs and addresses and proper permissions to use it.

I have utilized the access controls feature of OpenVPN Access Server, which effectively allows us to know who is currently connected, a valuable asset for database-related inquiries in our production environments. The user controls significantly aid in maintaining this oversight.

I have used role-defining features within OpenVPN Access Server, which creates a secure approach to enforcing least privilege effortlessly. Currently, we maintain around four roles: help desk, read-only auditors, administrators, and a VP of Engineering who serves as the super administrator. This setup minimizes the risk of unauthorized access or malpractices, allowing for easy group management whereby adding a new person to a group grants them access to all environments.

The best features OpenVPN Access Server offers include using a protocol called UDP over TCP, which gives comparatively lower latency and overall faster throughput. Once you are in a network, you will not see many bandwidth issues because it uses UDP for broadcasting or routing our request, making it better for streaming. The SSH access is also easier, requiring fewer configurations. The authentication methods are really good, allowing for local level authentication or LDAP, and we have also configured it with Okta for SSO  login, providing a better edge as it allows users to log in without entering usernames and credentials each time.

OpenVPN Access Server has positively impacted our organization by moving from TLS 1.1 to TLS 1.3, which has significantly improved our security constraints. The performance metrics demonstrate that previously used solutions were not optimal; with OpenVPN Access Server, we experience much less latency, making it easier to deploy, and it works well with firewalls. OpenVPN Access Server supports various authentication methods, reducing the need for manual username and password entry each time users connect, thereby creating less friction for those managing the VPN, resulting in a good impact overall.

OpenVPN Access Server can be improved by addressing the issue we faced with a single VPN server since it does not allow the creation of replicas without a load balancer, which we found to be an availability issue that could be easily fixed. Additionally, the certificate management—renewal and issuance for new certificates—is currently manual, which creates some friction. While it is not overly complex, it requires a subject matter expert to manage effectively.

Regarding needed improvements, I think they are doing a good job overall. My main concern relates to user experience; there are common complaints about not being able to manually download a profile to access the VPN. Connections and setups can be a bit confusing on the UI, which some of my team members have reported. Currently, the portal is not self-service; it could benefit from a one-click configuration setup to make deployment and management easier since we are paying for these services.

I have been using OpenVPN Access Server for almost two years now in Cloud Bold.

OpenVPN Access Server is stable.

OpenVPN Access Server's scalability is good; I have not faced significant issues in that regard.

We previously used Palo Alto GlobalProtect , primarily for the frustration it caused due to its inability to close properly. I suggested a switch because OpenVPN Access Server provides better visibility and a cleaner interface that does not annoy users the way GlobalProtect  did, which constantly notified users when disconnected and lacks a straightforward closure method.

The installation and setup of OpenVPN Access Server within my organization is straightforward as we need to open specific ports, namely 443 for TCP and 1194 for UDP. After opening these ports, we install the OpenVPN Access Server package in AWS , set the initial admin password, and usernames. The UI becomes accessible shortly thereafter, enabling us to manage other aspects.

We have seen a return on investment with OpenVPN Access Server, as the overall cost of management has decreased; one engineer can now handle what previously required more personnel, equating to a 66% reduction in engineering hours. Additionally, infrastructure costs have significantly dropped, thanks to the efficient SSO  login process which minimizes user input. The integration with our existing services, such as Okta for MFA, has further enriched user experience while centralizing administration.

Regarding the accuracy and reliability of OpenVPN Access Server's output, I have not encountered any major issues aside from a singular incident where availability was compromised due to a deployment issue. The accuracy has consistently been good; we have no trouble connecting to the VPN or accessing servers.

My impression of the connection speed using OpenVPN Access Server is good; we switched due to previous performance issues with another vendor. OpenVPN Access Server has effectively managed enterprise-level workloads, with minimal resource consumption.

The advice I would give to others looking into using OpenVPN Access Server is that it is suitable for companies with fewer than 10,000 employees. It works as claimed and the setup is easier, though for very large organizations with extensive user numbers, the scalability might need validation. I would rate this solution a 7 out of 10.

Our primary use case is enabling secure VPN access for remote employees. It ensures encrypted connections to internal systems and protects company data while users work from outside the office.

OpenVPN Access Server  has improved our organization's security by providing reliable and encrypted remote access to internal resources. It has made remote work easier for employees, reduced connectivity issues, simplified VPN management, and helped ensure business continuity while maintaining secure access to company systems.

OpenVPN Access Server 's best features are its strong security, easy deployment, centralized management, and reliable remote connectivity. The web-based administration portal simplifies user and VPN management, while encrypted connections ensure secure access to internal resources. It also supports multiple operating systems, making it easy for employees to connect from different devices.

OpenVPN Access Server is a reliable solution, but it could be improved with a more modern and intuitive user interface, enhanced monitoring and reporting dashboards, more detailed audit logs, easier integration with cloud identity providers, and built-in high-availability and load-balancing features. Additional automation through APIs and improved troubleshooting tools would also make administration more efficient.

We have been using OpenVPN Access Server for approximately one year. During this time, it has provided reliable and secure remote access while meeting our organization's connectivity and security requirements.

Yes, OpenVPN Access Server is a stable and reliable solution. It has provided consistent VPN connectivity with minimal downtime, making it dependable for secure remote access. With regular updates and maintenance, it continues to perform well and meet our business needs.

The scalability of OpenVPN Access Server is highly effective structurally but limited by pricing configurations, as it scales exponentially and well by deploying multiple node instances in an active-active cluster to handle heavy concurrent user traffic, although the licensing model does not scale dynamically and requires manual integration to purchase fixed user blocks.

The customer support for OpenVPN Access Server is highly reliable and helpful, the official ticket-based support team is responsive and technically knowledgeable when addressing complex configuration needs, and because OpenVPN is an industry standard, it is backed by extensive public knowledge, comprehensive documentation, and an active community forum that makes troubleshooting straightforward.

I would rate the customer support an eight out of ten, as the official ticket-based support team is highly responsive and technically proficient when handling complex challenges.

Yes. We previously used a basic VPN solution but switched to OpenVPN Access Server for its stronger security, easier management, better reliability, and cross-platform support. It also provides a more user-friendly experience for both administrators and end users.

It was very easy to install and set up OpenVPN Access Server; for example, launching it directly as a preconfigured virtual appliance from the cloud marketplace onto an AWS  instance streamlined the configuration, allowing us to establish user management controls rapidly without manual support.

We evaluated other options including standard cloud-native solutions such as AWS  Client VPN and alternative protocols such as standalone WireGuard, but ultimately we chose OpenVPN Access Server because it provided the best balance of built-in SAML integration, user self-service protocols, and granular access rules out of the box.

While we don't have exact ROI metrics, OpenVPN Access Server has delivered value through improved security, reliable remote connectivity, reduced administrative effort, and better support for remote work. These benefits have contributed to increased operational efficiency and lower support costs over time

The pricing and licensing are straightforward and scalable. Setup was simple with minimal deployment effort, and the overall cost has been reasonable for the features, security, and reliability provided.

Before choosing OpenVPN Access Server, we evaluated solutions such as Cisco AnyConnect, Fortinet FortiClient  VPN, and WireGuard. OpenVPN Access Server stood out because it offers a good balance of security, ease of deployment, centralized management, and cross-platform compatibility. While some enterprise VPN solutions provide more advanced security and networking features, they are often more complex to deploy and manage. WireGuard offers excellent performance but requires additional configuration for centralized user management and enterprise-scale administration. Overall, OpenVPN Access Server provided the best combination of simplicity, reliability, and security for our needs.

8/10. OpenVPN Access Server is a reliable, secure, and easy-to-manage VPN solution. I would recommend it to organizations looking for secure remote access with simple deployment, centralized management, and excellent cross-platform support.