1
Cisco Secure Client (AnyConnect)
Cisco Secure Client (including AnyConnect) helps IT and security teams manage dynamic, scalable endpoint VPN/ZTNA agents from a unified console.
Endpoint & Client-Based VPN Traditional Remote Access
Software clients that establish an encrypted tunnel from a user's device into the corporate network or data center.
2
Fortinet FortiClient
An advanced endpoint protection solution with a built-in VPN client, delivering integrated endpoint and network security.
3
Ivanti Connect Secure
Formerly Pulse Secure (acquired by Ivanti in 2020). A single client for desktop and mobile remote access, with zero-trust policy enforcement and modern authentication.
4
SonicWall VPN Clients
SonicWall's NetExtender, Mobile Connect, Connect Tunnel, and Global VPN Client provide easy, secure remote access for Windows, macOS, Linux, iOS, and Android users.
5
Check Point Remote Access VPN
Provides secure, seamless remote access to corporate networks and resources for travelling or remote employees, with multi-factor authentication and endpoint compliance checks.
Zero Trust Network Access (ZTNA) Modern VPN Alternative
Cloud-delivered platforms that replace network-level VPN access with identity- and context-aware, per-application access.
6
Palo Alto Networks GlobalProtect
A secure remote access client for endpoints, protecting mobile users regardless of location and extending consistent security policy everywhere.
7
Zscaler Private Access (ZPA)
Fast, secure access to private apps, services, and OT devices with a next-gen zero trust network access platform — connecting users directly to apps, never to the network.
8
Netskope Private Access (NPA)
Connects users anywhere to private resources hosted on-prem or in the cloud, ensuring fast, direct application connectivity and a superior user experience.
9
Absolute Secure Access
Formerly NetMotion Software (acquired by Absolute Software in 2021). Purpose-built for mobile workers, delivering resilient, seamless remote access that improves the employee experience.
10
WatchGuard Zero Trust Network Access
WatchGuard's current cloud-delivered ZTNA offering, providing secure, policy-based access for remote users without requiring a traditional always-on VPN.
11
Twingate
A zero trust network access service that replaces corporate VPNs with per-resource, identity-based access through lightweight connectors and clients.
12
Cloudflare Access
Zero trust access that checks identity and device posture for every request to self-hosted, SaaS and private network applications across Cloudflare's network.
13
Microsoft Entra Private Access
Identity-centric ZTNA from Microsoft that gives users secure access to private apps and resources, with Conditional Access applied to private network traffic.
Application Delivery & Gateway Access App & Mobile Gateways
Gateways and access-policy platforms that sit in front of applications, virtual desktops, and mobile back-ends to broker secure connections.
14
NetScaler Secure Access for Citrix DaaS
Formerly Citrix Gateway. NetScaler (now a Cloud Software Group business) provides secure, policy-based remote access to Citrix DaaS virtual desktops and self-hosted enterprise applications.
15
F5 BIG-IP Zero Trust Access
Formerly BIG-IP Access Policy Manager (APM), and successor to the long-discontinued FirePass SSL VPN. Delivers per-app VPN, IPsec VPN, and identity-aware proxy access to legacy and modern apps.
16
Ivanti Sentry
An in-line gateway that manages, encrypts, and secures traffic between mobile devices and back-end enterprise systems, as part of the Ivanti UEM platform.
17
Barracuda SecureEdge Access
Formerly Barracuda SSL VPN (end-of-life December 2020). An easy, secure VPN replacement built on Zero Trust Network Access within Barracuda's cloud-delivered SASE platform.
Cloud & Network Infrastructure VPN Site-to-Site & Access Points
VPN connectivity built into public cloud platforms and wireless/branch network infrastructure.
18
Google Cloud VPN
Securely extends a peer network to Google Cloud's network through an IPsec VPN tunnel, ideal for low-volume hybrid and multi-cloud connections.
19
HPE Aruba Networking VPN Services
Cloud-managed access points and the Virtual Intranet Access (VIA) soft client provide reliable, secure connectivity for remote employees, students, and branch sites.
20
AWS Client VPN
A managed, client-based VPN service that lets remote users securely reach AWS resources and on-premises networks using OpenVPN-based clients.
21
Azure VPN Gateway
Sends encrypted traffic between Azure virtual networks and on-premises locations over the public internet, supporting site-to-site, point-to-site and VNet-to-VNet connections.
Open-Source & Mesh VPN Community & Overlay Networks
Open-source VPN protocols, servers and WireGuard-based mesh networks for self-hosted and developer-friendly secure connectivity.
22
OpenVPN
Widely used open-source VPN protocol and software based on TLS, available as a community edition and as commercial access server and cloud services.
23
WireGuard
A fast, modern VPN protocol with a small codebase and state-of-the-art cryptography, built into the Linux kernel and available on most platforms.
24
strongSwan
An open-source IPsec-based VPN solution for Linux and other platforms, supporting IKEv1 and IKEv2 for remote access and site-to-site tunnels.
25
Tailscale
A WireGuard-based mesh VPN that connects devices and services into a private network with identity-based access controls and minimal configuration.
26
NetBird
An open-source, WireGuard-based overlay network and zero trust access platform that links peers directly with centralized access policies.
27
Pritunl
An open-source VPN server and management panel that supports OpenVPN and WireGuard clients, with enterprise features such as single sign-on and clustering.
Frequently Asked Questions
What is the difference between a VPN and ZTNA?
A traditional VPN places the user's device on the corporate network once authenticated, which can expose more resources than needed. Zero Trust Network Access grants access to specific applications on a per-session basis after verifying identity and device posture, following least-privilege principles.
Can ZTNA replace a VPN?
For many organizations ZTNA can replace remote-access VPN for application access, and it is often adopted gradually. Site-to-site connectivity, legacy protocols and some network-level use cases may still need VPN technology.
Which VPN protocols are most common?
IPsec with IKEv2, TLS-based VPNs such as OpenVPN, and WireGuard are the most widely used. WireGuard is valued for its small codebase and performance, while IPsec remains the standard for site-to-site tunnels and is broadly supported by network equipment.