tony_h

Hey CEO of Twingate here, not sure if this is your point, but the reality is that with remote work, most folks have to leave their VPN on to access their work. If their VPN is on, all their traffic is going to your corp network - zoom calls, youtube, netflix, etc. Of course, users can manually turn it on/off but a huge pain if you're having to constantly babysit it when WFH.

Hey, CEO of Twingate here. There are some similarities but we view ourselves as much lighter weight and flexible than ZS. A few ways we're different: - We eliminate the performance penalty of routing all your traffic through their cloud. We do almost all our routing decisions and authorization checks on-device to minimize performance hits. - Our service is protocol agnostic, so things like SSH, RDP, etc work out of the box (no special SSH proxies, SSH settings, etc). - We also let you try it out for free and our pricing is transparent :)

That said, we're big fans of ZS and think they are doing the world a huge favor by getting folks off traditional VPN :)

If it was just split-tunneling than yes :)

(see my answer above)

Hey, CEO of Twingate here. Splitting traffic off the device is just one element of the product - we provide significantly more controls than a typical "split tunnel VPN." You can set up the traffic segregation to go to any arbitrary number of destinations which can be in one cloud VPC, VPCs across multiple clouds, on-prem, routed via a VPC-egress for IP-based restrictions, or classic bypass which just exits the device normally. The segregation happens automatically without the user having to manual switch network profiles to access different environments. Our app just sits in the background and your traffic gets to where it needs to go.

You can also apply granular controls over how each connection is routed based on security and access policies. These policies are tied to your identity (via your IDP - Okta, Gsuite, etc) for easy user mgmt. You're essentially able to setup identity-based access controls on any destination address whether it's a web app, database, ssh server, etc. Very flexible by design and we get a ton of folks in devops & infra using it.

On the network side, we also eliminate the need for a public VPN gateway so there's no public attack surface on your private network/resources. Our connectors sit behind your firewall and are deployed as an overlay to your existing network topology so you don't have to reconfigure all your existing segmentation.

Sum it all up and it's much more powerful than just a split-tunnel VPN. Check it out for yourself at www.twingate.com - it's free to get started :)

Yup, this is spot on. Not just for demos, but sales in general. It's not about you. It's about the customer and solving problems they care about.

lol you're missing out! we'd be delighted if you would give us another shot :P