Hi
Like many others I've been waiting patiently for the release of the Anyconnect client that works with Meraki. Hopefully it's not going to be much longer. However, my business has not been able to wait endlessly for a solution to I've had to look for an alternate solution.
I've come across a client that works brilliantly and seems to tick all the boxes in terms of ease of use, simple to deploy, supports multiple profiles (if case you wanted to provide alternate client vpn site connections over a multi-site SD-WAN network), can redirect all traffic through the tunnel or allow local breakout and can easily standardise it by distributing the profile file. So for my org it's all the options we've been looking for with the exception of GPO deployment and administration. In our case we also opted to use an internal radius server for better security and configured the Meraki to provide certificate base authentication allowing users to connect using their AD username and password. It is a free client supplied by Draytek (intended for use with their Vigor routers). It support various connection types but the L2TP over IPSEC works seamlessly with the Meraki, is fast and like I said ticks all the boxes. Our only concern is it's not a Cisco products and either Draytek or Meraki can release an update at any time and boom, no vpn. As soon as Anyconnect is released we plan to switch but right now we sort of have no choice, especially since we've had real difficulty getting the native Win10 client to work (at that solution puts a load onto my helpdesk).
So with this in mind I just wanted to reach out to the experts here and ask if there is any reason to be concerned (security wise) about using the Draytek client? I also thought, for those that are desperate for a solution that works until Anyconnect is ready, that this might prove useful. For those who are interested to try it then the client can be downloaded here: https://www.draytek.com/products/smart-vpn-client
