--- title: How we test remote-access VPN and ZTNA | TEST4NET description: "Remote-access VPN and ZTNA gateways on the CloudLAB bench: tunnels per second with MFA, users under traffic, added latency and failover of the pair" image: https://test4net.com/hubfs/blog-covers/how-we-test-remote-access-vpn.png --- [Skip to content](https://test4net.com/blog/how-we-test-remote-access-vpn#main-content) [![TEST4NET](https://test4net.com/hubfs/test4net-logo-fixed-2.svg)](https://test4net.com/?hsLang=en) - Services - Products - Resources - Company - [English](https://test4net.com/blog/how-we-test-remote-access-vpn) - [Русский](https://test4net.com/ru/blog/how-we-test-remote-access-vpn) - [Հայերեն](https://test4net.com/hy/blog/how-we-test-remote-access-vpn) [News](https://test4net.com/news?hsLang=en) [Login](https://lab.test4net.com) [Support](https://test4net.com/support?hsLang=en) - [English](https://test4net.com/blog/how-we-test-remote-access-vpn) - [Русский](https://test4net.com/ru/blog/how-we-test-remote-access-vpn) - [Հայերեն](https://test4net.com/hy/blog/how-we-test-remote-access-vpn) What we test By technology Industries [Load & Performance Testing Throughput, sessions and latency up to and past the rated limit](https://test4net.com/services/load-performance-testing?hsLang=en) [Functional & Conformance Testing Features against the spec, RFC compliance with evidence](https://test4net.com/services/functional-conformance-testing?hsLang=en) [Interoperability Testing Multi-vendor behaviour, before it reaches production](https://test4net.com/services/interoperability-testing?hsLang=en) [Security & Resilience Testing NGFW, IPS and VPN efficacy and performance with threats on the wire](https://test4net.com/services/security-resilience-testing?hsLang=en) [Test Plan & Methodology Design What to test, how, and what counts as a pass](https://test4net.com/services/test-plan-design?hsLang=en) [Test Automation & CI/CD Regression suites wired into your release pipeline](https://test4net.com/services/test-automation?hsLang=en) [Training Programs Hands-on courses for your test engineers](https://test4net.com/services/training-programs?hsLang=en) [Equipment Repair Repair and verification of test equipment](https://test4net.com/services/equipment-repair?hsLang=en) [All services](https://test4net.com/services?hsLang=en) [Routing & Switching RFC 2544 and RFC 2889 on real ports, 1G to 100G](https://test4net.com/solutions/routing-switching?hsLang=en) [Firewalls & NGFW RFC 9411 throughput with inspection switched on](https://test4net.com/solutions/firewalls-ngfw?hsLang=en) [Load Balancers & ADC Connections, TLS and failover of the pair under load](https://test4net.com/solutions/load-balancers-adc?hsLang=en) [SD-WAN & WAN Path selection and QoS under emulated WAN conditions](https://test4net.com/solutions/sd-wan?hsLang=en) [Cloud & NFV Virtual appliances and cloud services under load](https://test4net.com/solutions/cloud-nfv?hsLang=en) [5G & Mobile Core Transport and core functions under subscriber traffic](https://test4net.com/solutions/5g-mobile-core?hsLang=en) [Wi-Fi Wi-Fi 6 clients and access points, Wi-Fi 7 in progress](https://test4net.com/solutions/wi-fi?hsLang=en) [Storage & Infrastructure Storage networks and servers under realistic I/O](https://test4net.com/solutions/storage?hsLang=en) [AI / Switching Fabric (RoCEv2) Lossless Ethernet for GPU clusters: PFC, ECN, fabric load](https://test4net.com/solutions/ai-fabric-rocev2?hsLang=en) [All technologies](https://test4net.com/services#coverage) [Telecom Operators Pre-deployment acceptance and vendor comparison](https://test4net.com/solutions/industries#telecom) [Network & Security Vendors Independent validation of your product claims](https://test4net.com/solutions/industries#vendors) [System Integrators Proof for the customer before the rollout](https://test4net.com/solutions/industries#integrators) [Enterprise & Banks Upgrades and new platforms checked before production](https://test4net.com/solutions/industries#enterprise) [All industries](https://test4net.com/solutions/industries?hsLang=en) Not sure where to start? Test plan and quote in 1–3 business days Tell us what you run and what worries you. We propose the tests, tools and timeline. [Request a test plan](https://test4net.com/contacts?hsLang=en) CloudLAB [How It Works Pick a scenario, run it in the live lab, get the report](https://test4net.com/cloudlab#how) [Equipment & Capabilities L2-3 to 100G, L4-7 past 200G, Wi-Fi, WAN emulation](https://test4net.com/cloudlab#equipment) [Access Plans Hourly sessions, subscriptions, dedicated racks](https://test4net.com/cloudlab/plans?hsLang=en) [Hosted DUT Testing Ship the box or upload the VM, we run the tests](https://test4net.com/cloudlab/hosted-dut?hsLang=en) [Open the CloudLAB portal](https://lab.test4net.com) Our tools [Traffic Generator L4-7 and security traffic past 200 Gbit/s, app mix library](https://test4net.com/products/traffic-generator?hsLang=en) [WANemu Delay, jitter, loss and bandwidth shaping per link](https://test4net.com/products/wanemu?hsLang=en) [Book a demo](https://test4net.com/contacts?hsLang=en) New: our own test tools Our own tools, in beta this autumn Built in our lab, priced per gigabit. Join the beta list and see them first. [Join the beta list](https://test4net.com/products#lead-form) Read Technologies / Protocols Methodologies [Blog Case studies, test insights and lab notes](https://test4net.com/blog?hsLang=en) [Industry News What is changing in network testing and infrastructure](https://test4net.com/news?hsLang=en) [FAQ How the lab, sessions and reports work](https://test4net.com/faq?hsLang=en) [Glossary Network testing terms in plain words](https://test4net.com/glossary?hsLang=en) [All resources](https://test4net.com/resources?hsLang=en) [BGP Route exchange, policy and convergence](https://test4net.com/blog/how-we-test-bgp?hsLang=en) [OSPF & IS-IS IGP adjacency, flooding and SPF timing](https://test4net.com/blog/how-we-test-ospf-is-is?hsLang=en) [MPLS & SR LDP, RSVP‑TE and SR‑MPLS label paths](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [EVPN / VXLAN Overlay fabrics, MAC/IP routes, multi-homing](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en) [IPsec & IKEv2 Tunnel setup, rekeying and throughput](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en) [TLS / HTTPS Handshakes, cipher suites and inspection](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en) [RoCEv2 Lossless Ethernet, PFC and ECN for AI fabrics](https://test4net.com/blog/how-we-test-rocev2?hsLang=en) [Wi-Fi 6 / 6E / 7 802.11ax/be, OFDMA, MLO and roaming](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en) [All protocols](https://test4net.com/blog/tag/protocols?hsLang=en) [RFC 2544 Throughput, latency, frame loss and back-to-back](https://test4net.com/methodologies/rfc-2544?hsLang=en) [RFC 2889 LAN switch benchmarking: forwarding, MAC learning, congestion](https://test4net.com/methodologies/rfc-2889?hsLang=en) [RFC 9411 / RFC 3511 Firewall and NGFW performance benchmarking](https://test4net.com/methodologies/rfc-9411-rfc-3511?hsLang=en) [RFC 6349 TCP throughput and buffer delay testing](https://test4net.com/methodologies/rfc-6349?hsLang=en) [RFC 5180 IPv6 benchmarking methodology](https://test4net.com/methodologies/rfc-5180?hsLang=en) [ITU-T Y.1564 Ethernet service activation: CIR, EIR, KPIs per service](https://test4net.com/methodologies/y-1564?hsLang=en) [ITU-T Y.1731 Ethernet OAM: delay, jitter, loss and SLA monitoring](https://test4net.com/methodologies/y-1731?hsLang=en) [TR-398 Wi-Fi in-premises performance test plan](https://test4net.com/methodologies/tr-398?hsLang=en) [All methodologies](https://test4net.com/methodologies?hsLang=en) Read [Case studies, test insights and lab notes Blog](https://test4net.com/blog?hsLang=en) [What is changing in network testing and infrastructure Industry News](https://test4net.com/news?hsLang=en) [How the lab, sessions and reports work FAQ](https://test4net.com/faq?hsLang=en) [Network testing terms in plain words Glossary](https://test4net.com/glossary?hsLang=en) [About Us Independent lab in Armenia, team and history](https://test4net.com/about?hsLang=en) [Why TEST4NET What you get that vendor slides never show](https://test4net.com/why-test4net?hsLang=en) [Lab & Certifications Bench capacity, methods and the standards we test against](https://test4net.com/lab?hsLang=en) [Partners Test tool vendors and IT partners we work with](https://test4net.com/partners?hsLang=en) [Contacts Talk to an engineer, not a sales bot](https://test4net.com/contacts?hsLang=en) [Support portal](https://test4net.com/support?hsLang=en) - Services What we test [Load & Performance Testing](https://test4net.com/services/load-performance-testing?hsLang=en) [Functional & Conformance Testing](https://test4net.com/services/functional-conformance-testing?hsLang=en) [Interoperability Testing](https://test4net.com/services/interoperability-testing?hsLang=en) [Security & Resilience Testing](https://test4net.com/services/security-resilience-testing?hsLang=en) [Test Plan & Methodology Design](https://test4net.com/services/test-plan-design?hsLang=en) [Test Automation & CI/CD](https://test4net.com/services/test-automation?hsLang=en) [Training Programs](https://test4net.com/services/training-programs?hsLang=en) [Equipment Repair](https://test4net.com/services/equipment-repair?hsLang=en) [All services](https://test4net.com/services?hsLang=en) By technology [Routing & Switching](https://test4net.com/solutions/routing-switching?hsLang=en) [Firewalls & NGFW](https://test4net.com/solutions/firewalls-ngfw?hsLang=en) [Load Balancers & ADC](https://test4net.com/solutions/load-balancers-adc?hsLang=en) [SD-WAN & WAN](https://test4net.com/solutions/sd-wan?hsLang=en) [Cloud & NFV](https://test4net.com/solutions/cloud-nfv?hsLang=en) [5G & Mobile Core](https://test4net.com/solutions/5g-mobile-core?hsLang=en) [Wi-Fi](https://test4net.com/solutions/wi-fi?hsLang=en) [Storage & Infrastructure](https://test4net.com/solutions/storage?hsLang=en) [AI / Switching Fabric (RoCEv2)](https://test4net.com/solutions/ai-fabric-rocev2?hsLang=en) [All technologies](https://test4net.com/services#coverage) Industries [Telecom Operators](https://test4net.com/solutions/industries#telecom) [Network & Security Vendors](https://test4net.com/solutions/industries#vendors) [System Integrators](https://test4net.com/solutions/industries#integrators) [Enterprise & Banks](https://test4net.com/solutions/industries#enterprise) [All industries](https://test4net.com/solutions/industries?hsLang=en) [Not sure where to start? Test plan and quote in 1–3 business days](https://test4net.com/contacts?hsLang=en) - Products CloudLAB [How It Works](https://test4net.com/cloudlab#how) [Equipment & Capabilities](https://test4net.com/cloudlab#equipment) [Access Plans](https://test4net.com/cloudlab/plans?hsLang=en) [Hosted DUT Testing](https://test4net.com/cloudlab/hosted-dut?hsLang=en) [Open the CloudLAB portal](https://lab.test4net.com) Our tools [Traffic Generator](https://test4net.com/products/traffic-generator?hsLang=en) [WANemu](https://test4net.com/products/wanemu?hsLang=en) [Book a demo](https://test4net.com/contacts?hsLang=en) [New: our own test tools Our own tools, in beta this autumn](https://test4net.com/products#lead-form) - Resources Read [Blog](https://test4net.com/blog?hsLang=en) [Industry News](https://test4net.com/news?hsLang=en) [FAQ](https://test4net.com/faq?hsLang=en) [Glossary](https://test4net.com/glossary?hsLang=en) [All resources](https://test4net.com/resources?hsLang=en) Technologies / Protocols [BGP](https://test4net.com/blog/how-we-test-bgp?hsLang=en) [OSPF & IS-IS](https://test4net.com/blog/how-we-test-ospf-is-is?hsLang=en) [MPLS & SR](https://test4net.com/blog/how-we-test-mpls-and-segment-routing?hsLang=en) [EVPN / VXLAN](https://test4net.com/blog/how-we-test-evpn-vxlan?hsLang=en) [IPsec & IKEv2](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en) [TLS / HTTPS](https://test4net.com/blog/how-we-test-tls-and-https?hsLang=en) [RoCEv2](https://test4net.com/blog/how-we-test-rocev2?hsLang=en) [Wi-Fi 6 / 6E / 7](https://test4net.com/blog/how-we-test-wi-fi-6-6e-7?hsLang=en) [All protocols](https://test4net.com/blog/tag/protocols?hsLang=en) Methodologies [RFC 2544](https://test4net.com/methodologies/rfc-2544?hsLang=en) [RFC 2889](https://test4net.com/methodologies/rfc-2889?hsLang=en) [RFC 9411 / RFC 3511](https://test4net.com/methodologies/rfc-9411-rfc-3511?hsLang=en) [RFC 6349](https://test4net.com/methodologies/rfc-6349?hsLang=en) [RFC 5180](https://test4net.com/methodologies/rfc-5180?hsLang=en) [ITU-T Y.1564](https://test4net.com/methodologies/y-1564?hsLang=en) [ITU-T Y.1731](https://test4net.com/methodologies/y-1731?hsLang=en) [TR-398](https://test4net.com/methodologies/tr-398?hsLang=en) [All methodologies](https://test4net.com/methodologies?hsLang=en) Read [Blog Case studies, test insights and lab notes](https://test4net.com/blog?hsLang=en) [Industry News What is changing in network testing and infrastructure](https://test4net.com/news?hsLang=en) [FAQ How the lab, sessions and reports work](https://test4net.com/faq?hsLang=en) [Glossary Network testing terms in plain words](https://test4net.com/glossary?hsLang=en) - Company [About Us](https://test4net.com/about?hsLang=en) [Why TEST4NET](https://test4net.com/why-test4net?hsLang=en) [Lab & Certifications](https://test4net.com/lab?hsLang=en) [Partners](https://test4net.com/partners?hsLang=en) [Contacts](https://test4net.com/contacts?hsLang=en) [News](https://test4net.com/news?hsLang=en) [Login](https://lab.test4net.com) [Support](https://test4net.com/support?hsLang=en) [All articles](https://test4net.com/blog) [Security](https://test4net.com/blog/tag/security-performance) # How we test remote-access VPN: 9:00 logins, MFA and failover ![](https://test4net.com/hubfs/IMG_0070.jpg) [Alexander Zemskov](https://test4net.com/blog/author/az) October 30, 2026 5 min read [English](https://test4net.com/blog/how-we-test-remote-access-vpn) [Русский](https://test4net.com/ru/blog/how-we-test-remote-access-vpn) [Հայերեն](https://test4net.com/hy/blog/how-we-test-remote-access-vpn) ![How we test remote-access VPN: 9:00 logins, MFA and failover](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-remote-access-vpn.png?width=1600&height=900&name=how-we-test-remote-access-vpn.png) In this article A VPN concentrator datasheet gives a user count and a throughput figure, both taken separately: thousands of idle tunnels for the first, a few fat ones for the second. A Monday morning looks different. 3,000 people connect between 8:50 and 9:10, every login goes through the directory and an MFA push, and then everyone joins a video call through the tunnel. We measure that morning: tunnels per second with authentication on, what one user gets when all of them are connected, and how many come back after the pair fails over. ## The bench The device under test is a remote-access VPN concentrator, a firewall with an SSL VPN or IPsec client gateway, or a ZTNA gateway, one of the device classes of our [firewall and NGFW bench](https://test4net.com/solutions/firewalls-ngfw?hsLang=en): a box shipped to CloudLAB, an image on the bench hypervisor or an instance in your tenant. The generator plays the employees: IPsec and SSL VPN clients by the thousand, logging in along a curve taken from your gateway logs, with video calls, file shares and SaaS over TLS inside the tunnels. Emulated servers answer behind the gateway. The authentication chain is part of the load. Your RADIUS, LDAP or SAML identity provider joins the run, or a lab instance answers with the response time measured in your network, MFA wait included. The client side passes through our [WANemu](https://test4net.com/products/wanemu?hsLang=en) emulator (in beta on 1G and 10G links) with home broadband and LTE profiles. Tunnel mechanics (IKEv2 setup, rekey, NAT-T, DPD) are covered in the [IPsec and IKEv2 post](https://test4net.com/blog/how-we-test-ipsec-and-ikev2?hsLang=en). This one is about the person at the far end of the tunnel. ## What we check - Login wave: tunnels per second with authentication on, along the 8:50–9:10 curve; time from the click to the first packet in the tunnel, p50 and p99 - Concurrent users: the count where a new login is refused or connected users slow down, with traffic in every tunnel - Throughput per user and in total: full tunnel and split tunnel, IPsec, SSL VPN over DTLS and over TLS - Added latency: round trip and jitter for voice and video at idle, 50 % and 90 % of the measured load - Re-authentication and MFA: session lifetimes that expire for everyone in the same 15 minutes, an identity provider that answers in 5 s or not at all, and who stays connected meanwhile - ZTNA policy: per-application access with posture checks, setup time per app, the cost of thousands of rules in new connections per second - Failover of the pair: the active unit switched off with all users on; seconds until traffic flows, sessions that survived, the reconnect storm and the minute the last user is back ## What usually breaks The login wave. A concentrator rated for 10,000 users brings up 10,000 tunnels in the vendor test against a local user database. In a typical project the real chain (directory lookup, MFA push, address assignment, posture check) brings the rate down from a few hundred setups per second to about 40. At 9:05 the queue is minutes long, clients time out and retry, and the retries make it longer. A longer client timeout and a second authentication server bring the wait under a minute. The fallback to TLS. SSL VPN clients prefer DTLS over UDP. A home router or a hotel network that blocks UDP pushes them onto TLS over TCP. With 1 % loss from the LTE profile, TCP inside TCP stalls: retransmissions pile up in both layers, and in a typical run a file copy through the tunnel drops to about a third of the same copy over DTLS. Both numbers go into the report per profile. Failover. The pair switches in 2 seconds as promised, but on many platforms SSL VPN sessions are not synced between the units, so every user logs in again, MFA included. 3,000 logins arrive within a minute, the identity provider becomes the bottleneck, and the last user is back after 6 minutes. The 2 seconds on the datasheet are honest. Users judge the outage by the reconnect curve. ## What is in the report The login curve: tunnels per second and time to the first packet per percentile, next to the curve from your logs. The user ceiling with traffic on. Throughput per user and in total per tunnel type, split and full. Latency added at each load step. The re-authentication and MFA cases as a pass and fail list. The failover table with seconds, surviving sessions and the reconnect curve. Configs, identity provider timings and emulator profiles, so the same Monday morning replays on the next firmware. ## Where to start Send us the gateway model, the user count and an export of the VPN policy. We answer with a draft test plan: the items, the bench layout and the dates. The report is yours to keep and to show to the vendor. [Write to us](https://test4net.com/contacts?hsLang=en) or look at [what else the bench does](https://test4net.com/services?hsLang=en). News on this topic - [Oct 20, 2026 Cloud NGFW: 0% for AWS and Azure, 99.95% for Check Point. Inside the test that produced those numbers](https://test4net.com/blog/cloud-ngfw-test-2026-aws-azure-check-point?hsLang=en) Share Pass it on to someone who runs a network Independent lab data is most useful in the hands of the people who make the call. Send this piece to a colleague. [LinkedIn](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-remote-access-vpn) [X](https://twitter.com/intent/tweet?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-remote-access-vpn&text=How+we+test+remote-access+VPN%3A+9%3A00+logins%2C+MFA+and+failover) [Telegram](https://t.me/share/url?url=https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-remote-access-vpn&text=How+we+test+remote-access+VPN%3A+9%3A00+logins%2C+MFA+and+failover) [WhatsApp](https://wa.me/?text=How+we+test+remote-access+VPN%3A+9%3A00+logins%2C+MFA+and+failover%20https%3A%2F%2Ftest4net.com%2Fblog%2Fhow-we-test-remote-access-vpn) Copy link More apps ![](https://test4net.com/hubfs/IMG_0070.jpg) Written by ### [Alexander Zemskov](https://test4net.com/blog/author/az) Alexander Zemskov leads network and security testing at TEST4NET, an independent, vendor-neutral testing lab in Yerevan, Armenia. With 19+ years in performance and load testing on IXIA, Spirent, Keysight, Xena and Xinertel platforms, he runs NGFW, WAF, IPS, DLP and SASE evaluations for telecom operators, banks and system integrators. [LinkedIn](https://www.linkedin.com/in/azemskov/) [Website](https://test4net.com/?hsLang=en) [Previous article How we test IPv6 and transition: dual stack, NAT64, 464XLAT](https://test4net.com/blog/how-we-test-ipv6-transition?hsLang=en) [Next article How we measure power under load: watts per Gbps at 4 load steps](https://test4net.com/blog/how-we-measure-power-under-load?hsLang=en) In this article On the bench ### Have a device to put through this? Send us the shortlist and the KPIs that decide it. We will come back with a scoped test plan, a timeline and a fixed price. [Talk to a test engineer](https://test4net.com/contacts?hsLang=en) Blog ## Keep reading [![How we measure power under load: watts per Gbps at 4 load steps](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-measure-power-under-load.png?width=880&height=550&name=how-we-measure-power-under-load.png)](https://test4net.com/blog/how-we-measure-power-under-load?hsLang=en) [Standards and methodology](https://test4net.com/blog/tag/standards-and-methodology) ### [How we measure power under load: watts per Gbps at 4 load steps](https://test4net.com/blog/how-we-measure-power-under-load?hsLang=en) The datasheet of a switch, router or firewall gives two power figures: "typical" and "maximum". Neither says at what load, with which optics or at what inlet temperature.… ![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 30, 2026 · 5 min read [![How we test IPv6 and transition: dual stack, NAT64, 464XLAT](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-ipv6-transition.png?width=880&height=550&name=how-we-test-ipv6-transition.png)](https://test4net.com/blog/how-we-test-ipv6-transition?hsLang=en) [Routing and switching](https://test4net.com/blog/tag/routing-and-switching) ### [How we test IPv6 and transition: dual stack, NAT64, 464XLAT](https://test4net.com/blog/how-we-test-ipv6-transition?hsLang=en) A router datasheet shows IPv6 as a tick next to IPv4, with one throughput figure for both. On the bench the two protocols often part ways: at small packets, with an exten… ![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 30, 2026 · 4 min read [![How we test load balancers and ADCs: CPS, TLS and a hung server](https://test4net.com/hs-fs/hubfs/blog-covers/how-we-test-load-balancers-and-adc.png?width=880&height=550&name=how-we-test-load-balancers-and-adc.png)](https://test4net.com/blog/how-we-test-load-balancers-and-adc?hsLang=en) [Storage and data center](https://test4net.com/blog/tag/storage-and-data-center) ### [How we test load balancers and ADCs: CPS, TLS and a hung server](https://test4net.com/blog/how-we-test-load-balancers-and-adc?hsLang=en) A load balancer datasheet gives two big numbers: L4 connections per second and L7 requests per second. They are usually taken with small objects, no TLS, no persistence a… ![](https://test4net.com/hs-fs/hubfs/IMG_0070.jpg?width=22&height=22&name=IMG_0070.jpg) Alexander Zemskov Oct 30, 2026 · 5 min read [![TEST4NET LLC](https://test4net.com/hubfs/test4net-logo-fixed.svg)](https://test4net.com?hsLang=en) Independent testing and validation for telecom, information security and cloud infrastructure – real insights, not assumptions [mailto:sales@test4net.com](mailto:sales@test4net.com) #### Navigate - [Home](https://test4net.com/?hsLang=en) - [Why TEST4NET](https://test4net.com/why-test4net?hsLang=en) - [About us](https://test4net.com/about?hsLang=en) - [Contact](https://test4net.com/contacts?hsLang=en) - [Blog](https://test4net.com/blog?hsLang=en) - [Industry News](https://test4net.com/news?hsLang=en) #### Get in touch Sales [sales@test4net.com](mailto:sales@test4net.com) Support [support.test4net.com](https://support.test4net.com) © 2026 TEST4NET LLC. All rights reserved. [Privacy Policy](https://test4net.com/privacy-policy?hsLang=en) [Legal](https://test4net.com/legal?hsLang=en) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alexander Zemskov", "url" : "https://test4net.com/blog/author/az" }, "dateModified" : "2026-10-30T04:23:14.986Z", "datePublished" : "2026-10-30T04:23:14.000Z", "headline" : "How we test remote-access VPN and ZTNA | TEST4NET", "image" : [ "https://test4net.com/hubfs/blog-covers/how-we-test-remote-access-vpn.png" ], "mainEntityOfPage" : { "@id" : "https://test4net.com/blog/how-we-test-remote-access-vpn", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://test4net.com/hubfs/test4net-logo-fixed.svg" }, "name" : "TEST4NET LLC" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://test4net.com/#organization", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "AM", "addressLocality" : "Yerevan", "postalCode" : "0033", "streetAddress" : "3 Hakob Hakobyan Street (Mergelyan Hub)" }, "alternateName" : "TEST4NET", "contactPoint" : { "@type" : "ContactPoint", "availableLanguage" : [ "en", "ru", "hy" ], "contactType" : "sales", "email" : "sales@test4net.com", "telephone" : "+374-60-88-88-99" }, "description" : "Independent, vendor-neutral lab for testing network and cybersecurity products — NGFW, WAF, IPS, DLP and SASE — and an authorized distributor of test, measurement and network infrastructure solutions.", "email" : "sales@test4net.com", "foundingDate" : "2024", "image" : "https://test4net.com/hubfs/og-t4n.png", "logo" : "https://test4net.com/hubfs/test4net-logo-fixed-2.svg", "name" : "TEST4NET LLC", "sameAs" : [ "https://www.linkedin.com/company/test4net/", "https://t.me/TEST4NET", "https://www.facebook.com/people/Test4net-LLC/61591470856077/" ], "telephone" : "+374-60-88-88-99", "url" : "https://test4net.com/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://test4net.com/#website", "@type" : "WebSite", "inLanguage" : "en", "name" : "TEST4NET", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : { "@type" : "EntryPoint", "urlTemplate" : "https://test4net.com/hs-search-results?term={search_term_string}" } }, "publisher" : { "@id" : "https://test4net.com/#organization" }, "url" : "https://test4net.com/" } ``` ```json { "@context" : "https://schema.org", "@type" : "BreadcrumbList", "itemListElement" : [ { "@type" : "ListItem", "item" : "https://test4net.com/", "name" : "TEST4NET", "position" : 1 }, { "@type" : "ListItem", "item" : "https://test4net.com/blog", "name" : "Blog", "position" : 2 }, { "@type" : "ListItem", "item" : "https://test4net.com/blog/how-we-test-remote-access-vpn", "name" : "How we test remote-access VPN: 9:00 logins, MFA and failover", "position" : 3 } ] } ```