Evaluating Azure VPN gateways - CloudGuard NGTP the cheapest solution ?

[ibrown]

Hello All,

my company is looking at either the native azure VPN gateway or a Checkpoint instance to solely offer vpn connectivity to external suppliers via our cloud products. Would I be correct in assuming the NGTP version is the lowest I can go ? I'm only really interested in the VPN part, and we have on-premise R81.20 and management to control it.

The documentation seems to be either an admin guide or nothing so I am looking to hear from people who have experience of it (without having to talk to sales yet...)

Thanks in advance

Ian

[Chris_Atkinson · Accepted solution]

NGTP is the lowest for the initial purchase, BYOL is also commonly cheaper than PAYG.

Best to speak to your local sales team to understand your options further than this.

[ibrown]

Thank you Chris, I thought I was correct but it is good to have confirmation. Nice to know about BYOL as well.

Thanks

[Don_Paterson]

Is this a valid option?

NGFW

CPSB-VEN-NGFW

[PhoneBoy]

That should be an option, yes.
Note the SKUs are annual SKUs, not perpetual ones.

[Chris_Atkinson]

I'm positive for the initial purchase (year 1) NGTP is the lowest available both in marketplace and product catalogue e.g.

CPSG-VSEC-AZURE-BUN-NGTP-1Y
CPSG-VSEC-VEN-BUN-NGTP-1Y

[Don_Paterson]

The NGFW sku is there. Just hidden. 

Just looking for a reasonably priced solution. 

Paying for TP for only a VPN GW (per core per year) doesn't seem right. 

[ibrown]

Thanks Don, and everyone.

Checking the numbers against a plain Azure native VPN gateway, it's about 4 times less the cost (PAYG license) of the CP solution. Which is a hard pill to swallow, just for the single function I want.

[the_rock]

Im with you there, agree.

Andy

[Don_Paterson]

Ask for a decent discount (for byol).

Alternatively I'd push for an authoritive answer from account services on any possible ngfw option.

[Jeff_Engel]

Hi @ibrown 

I am going to doublecheck but I believe the Azure VPN Gateway also charges for data transfer.  Discount idea from @Don_Paterson is also very valid.

[ibrown]

Thanks Jeff,

yes there will be data egress charges for both. I've reached out to our account manager to ask for BYOL licensing

[Jeff_Engel]

Confirmed.  Please run through this calculator to estimate the full cost.

https://azure.microsoft.com/en-us/pricing/calculator/

[Jeff_Engel]

I would avoid this one because it begins with CPSB which implies it is an add-on subscription.  @Chris_Atkinson  is correct and lists the available SKUs.

[the_rock]

Chris is absolutely correct. I recall our SE also telling us the same few months ago.

Best,

Andy