Azure VPN Gateway vs Fortra ZTNA

Azure VPN Gateway provides VPN access and site-to-site networking with advanced administrative controls. Listed capabilities include SSO and SCIM, device posture checks, and audit logs. Supported platforms and access routes include Windows, macOS, Linux, iOS, Android, a web portal, Azure CLI, and REST API. The service has no free plan, and the listed plan groups specify different bandwidth and tunnel limits. Basic lists 100 Mbps, 10 site-to-site tunnels, and 128 point-to-site tunnels. VpnGw1–VpnGw5 lists bandwidth from 650 Mbps to 10 Gbps, up to 100 site-to-site tunnels, and up to 10,000 point-to-site tunnels. VpnGw1AZ–VpnGw5AZ lists the same bandwidth range and tunnel ceilings. No plan prices are listed here.

Fortra ZTNA provides secure remote access to private applications and helps protect their data. It makes access decisions using user, device, and data context, so authorized people can reach only approved applications. An endpoint client monitors device posture and reports changes for access adjustments. The product can hide applications from the network, monitor traffic for lateral movement, and discover private applications to help organizations onboard them from an existing VPN. Private applications may be hosted in AWS, Azure, or GCP. Agent-based access supports browser and thick-client applications, while web applications can be accessed without an agent. Additional protections include digital rights management and data loss prevention policies, as well as inspection and blocking of files identified as infected with malware. Fortra describes a unified proxy architecture shared across its ZTNA, secure web gateway, and CASB offerings, with shared policies and monitoring. The product supports hybrid deployment and lists web as its supported platform. It is paid, has no free plan, and pricing is available on request.