Twingate - is it reasonable to use in a corporate environment

Posted by vane1978@reddit | sysadmin | View on Reddit | 9 comments

On a trial with Twingate, and it seems to be working fine. What I like about it that I did not have to create any ports on my corporate firewall to get this to work - unlike Tailscale. And its Twingate Connecters works great during a failover event. I have less than 80 users. What are your thoughts in regards of reliability, performance, business continuity and security? Or any alternatives that you feel it’s better than Twingate and why.

Reply to Post

9 Comments

[-]

PhilipLGriffiths88@reddit

What is your use case and requirements??

[-]

vane1978@reddit (OP)

I would like to move away using SSL VPN because it’s slow and constantly getting hit by Password Spraying Attacks.

[-]

PhilipLGriffiths88@reddit

My understanding of Twingate is that it will nicely solve your use case. I am of the opinion that solutions that do not use Wireguard are better to deliver zero trust networking solutions (which I am a big proponent of), its much easier to scale policies when you are not using ACLs (as Wireguard does). Twingate does not use Wireguard so ticks that box IMHO. My only suggestion, though I am biased, is also check out OpenZiti, which is a free and open source zero trust network overlay (https://openziti.io/) or its commercial SaaS NetFoundry (whom I work for). If you want a a quick overview and intro, I gave a talk at the Cloud Security Alliance on Monday, 'Zero Trust Networking for difficult use cases—Multi-CIoud/OT/IoT, air-gapped networks and more' which as you will see was very well received... even had some comments from John Kindervag on the definition of 'trust' - https://www.linkedin.com/feed/update/urn:li:activity:7221461016088375297/

[-]

Nisd@reddit

Used it for a while in a small environment. I really like it and it was simple to configure. My only complaint would be that the latency is higher then Tailscale, but that most likely won't matter unless you do something that is latency senetive like (RDP)

[-]

bren-tg@reddit

Hi there! Full transparency, I'm a mod on r/twingate and employee of Twingate. Super curious to see what the community says but don't hesitate to reach out and post on our subreddit as well if you want to pick the collective brain of our community. We also have several employees moderating / answering questions there so don't be shy!

[-]

BlackV@reddit

lol status.twingate.com every vendor has one of those, every single vendor never updates those live

[-]

AppIdentityGuy@reddit

What on earth is twingate? 🤣 Never heard of it..

[-]

bjacksonokc@reddit

Can’t rave about Twingate enough. Super easy to implement and manage. Granular control of access and visibility to who is accessing. I have a 60 user implementation with local AD syncing to Entra. Multiple groups for multiple resources they need to access. Drop them in the AD group(s), done. SBL for local AD joined computers working away from office so GPO processes at login. It just works. I switched away from perimeter VPNs for the same reasons. Do it.

[-]

whizbangbang@reddit

I’ve deployed Twingate in a bunch of environments (big and small) and it is rock solid. I like Twingate much better than Tailscale, which IMO is designed for small, personal networks and starts getting cumbersome to manage once you get past 20 endpoints or so.