Azure VPN Gateway vs Smallstep ZTNA
Azure VPN Gateway
azure.microsoft.comSmallstep ZTNA
smallstep.comSide by side
| Figure | Azure VPN Gateway | Smallstep ZTNA |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | — |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | — |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 12 | 1 |
| Spec score · Business VPN Software | 9.3 (#6) | 7.8 (#58) |
| Access model | vpn | ztna |
| Admin control level | advanced | advanced |
| Authentication | Site-to-site tunnels use preshared keys, while point-to-site deployments can use certificates, RADIUS or Microsoft Entra ID. | Authentication happens silently without popups, login screens, or user prompts when a device has a valid attested certificate. |
| Free plan | No | No |
| SSO / SCIM | Yes | Yes |
| Supported platforms | Windows,macOS,Linux,iOS,Android,web portal,Azure CLI,REST API | Windows,macOS,Linux,iOS |
| What it does | Azure VPN Gateway encrypts traffic between Azure virtual networks, on-premises networks and remote devices. | Smallstep Enterprise Relay is a transparent VPN that uses standards-based private MASQUE relays, mutual TLS, and hardware-bound device certificates to control access to SaaS apps, internal networks, and AI initiated workflows. |
Plans
Azure VPN Gateway
- BasicPrice not published
- BasicPriced on request
- VpnGw1–VpnGw5Price not published
- VpnGw1–VpnGw5Priced on request
- VpnGw1AZ–VpnGw5AZPrice not published
- VpnGw1AZ–VpnGw5AZPriced on request
- Basic$26.28 a month
- VpnGw1$138.70 a month
- VpnGw2$357.70 a month
- VpnGw3$912.50 a month
In their own words
Azure VPN Gateway
Azure VPN Gateway provides VPN access and site-to-site networking with advanced administrative controls. Listed capabilities include SSO and SCIM, device posture checks, and audit logs. Supported platforms and access routes include Windows, macOS, Linux, iOS, Android, a web portal, Azure CLI, and REST API. The service has no free plan, and the listed plan groups specify different bandwidth and tunnel limits. Basic lists 100 Mbps, 10 site-to-site tunnels, and 128 point-to-site tunnels. VpnGw1–VpnGw5 lists bandwidth from 650 Mbps to 10 Gbps, up to 100 site-to-site tunnels, and up to 10,000 point-to-site tunnels. VpnGw1AZ–VpnGw5AZ lists the same bandwidth range and tunnel ceilings. No plan prices are listed here.
Smallstep ZTNA
Smallstep ZTNA has no write-up on Specifiction yet; its figures are above.