This review first appeared in issue 360 of PC Pro.
TP-Link’s first Wi-Fi 7 business access point (AP) sets a high standard for the rest to follow, as this slimline discus has a mighty BE19000 rating. The EAP783 achieves this with a claimed 1,376Mbits/sec on the 2.4GHz radio, 5,760Mbits/sec on 5GHz and a speedy 11,520Mbits/sec on 6GHz, with the latter enabling the ultrawide Wi-Fi 7 320MHz channels.
It’s also one of the first APs to support the multi-link operation (MLO) feature, which allows devices to connect to the 2.4GHz, 5GHz and 6GHz bands simultaneously for increased throughput and reduced latency. The only downside is that very few end-user devices currently support MLO, and Windows users will have to wait until Windows 11 24H2 is fully released.
The EAP783 has other appealing credentials. It provides two 10GbE ports, with the first requiring an 802.3bt PoE++ power source; there’s also an input for TP-Link’s optional 12V adapter. The second 10GbE port is designed to be aggregated with the primary network port for a higher network connection speed.
Despite the AP’s 12 internal aerials, TP-Link has kept the size down to a manageable 280mm diameter and a thickness of 47mm. It’s heavy, though, tipping the scales at 1.4kg – around 15g more than Zyxel’s WBE660S.
The EAP783 supports standalone mode, where the web console’s quick start wizard requests a new username and password, after which it removes the default admin account for extra security. Eight SSIDs per radio can be created, and the wizard asks you to configure the first three and provide new encryption keys.
For our real-world Wi-Fi 7 performance tests we connected the AP to the lab’s Zyxel XS1930-12HP 10GbE PoE++ switch and used a Lenovo desktop client running Windows 11 Pro 24H2 Insider Preview and fitted with a TP-Link Archer TBE550S Wi-Fi 7 PCI-E adapter. With Windows reporting a Wi-Fi 7 connection speed of 5,764Mbits/sec, we saw large file copies between the client and a Windows server on our 10GbE LAN averaging close-range speeds of 323MB/sec, dropping to an equally impressive 280MB/sec with the AP placed ten meters away in an adjoining room.
The web console provides a separate section for MLO where you create a new SSID and decide which of the three radios to assign to it. Performance-wise, we saw no benefits from a triple radio MLO SSID as the Windows 11 client reported the same speed as a standard Wi-Fi 7 connection and our copies were no faster.
TP-Link offers plenty of cloud management choices. You can deploy its hardware or free software controller on-site or use its cloud-hosted controller, which has a yearly fee of £165 for 250 devices. We use TP-Link’s OC300 dual-port controller appliance in the lab as its £130 price enables lifetime cloud management of up to 500 Omada APs, switches and routers.
All controllers are viewed from the Omada portal home page, and selecting the OC300 transported us to its own console. This presents a ribbon across the top showing all cloud-managed devices, and selecting a site below provides options to create multiple dashboards with a wide range of widgets.
The EAP783 initially appears as “pending” in the portal, and all you do is adopt it and assign it to a site. It only takes a minute, after which the AP disables its local web interface for security reasons, takes all its settings from the controller and broadcasts your preconfigured SSIDs.
It’s easy to add more SSIDs, apply a desired personal or enterprise encryption scheme, set client and SSID rate limits and define schedules to determine when they’re active. For the EAP783, we could enable any of all of its three radios, and we noted the portal has an option to create MLO Wi-Fi 7 SSIDs.
The EAP783 will appeal to businesses looking to make an early transition to Wi-Fi 7. It delivers excellent performance and is MLO-ready, and TP-Link’s Omada cloud platform offers great remote management services.
This review first appeared in issue 360 of PC Pro.
The Meeting Owl products from Owl Labs have consistently been among the best video conferencing (VC) solutions on the market, and the Meeting Owl 4+ comes with even more appeal. Previously, the Owl Pro and Owl 3 offered a comparatively low 1080p resolution, but the Owl 4+ sports a new 64MP fish-eye camera that boosts video output to 4K Ultra HD.
There’s more going on inside, as it gets a faster Snapdragon 8250 SoC – the same as used by the 4K Owl Bar. The extra power has been put to good use by the Owl Intelligence System (OIS) software as businesses can pair multiple Owl devices together to provide total in-room coverage.
The Owl 4+ sports the same array of eight microphones as the Owl 3, which it uses to identify speakers. The smart part is the video feed: the Owl 4+ presents a 360-degree panoramic view across the top of the screen, dynamically splits the main display below to show the three most recent speakers and zeros in on the person currently speaking.
The internal speaker count has been reduced from three to two, but output quality is undiminished. Comparisons with an Owl Pro found that the Owl 4+ was just as loud at maximum volume but delivered a much cleaner sound quality, with its heavier body producing a warmer bass without the shrillness of the Owl Pro.
Other improvements are an integral K-Lock security slot and an option to turn off the white LED “eyes” if they become a distraction. The Owl 4+ comes with an external power supply that can be replaced with an optional Power over Ethernet (PoE) network adapter, which has the part number ACCMTW405-0006 and costs around £75.
Installation is a breeze. After plugging the Owl 4+ into a Windows 11 Pro desktop PC, it loaded all the required drivers and defaulted to the split-screen mode. Management options abound: the free Owl mobile app connects over Bluetooth and provides tools to register the device and connect it to a wireless network for software updates. You can also enable remote management from the Owl Nest cloud portal, and meeting room analytics.
Using the iOS app on an iPad, we could passcode-protect Bluetooth access, choose the central point for the 360-panoramic view or disable it, set the camera to lock and focus on one person or follow a presenter. You can turn off the video feed and control the volume during meetings and use a whiteboard to present notes and diagrams to attendees, replacing the split screen in their session window.
The Owl 4+ supports all popular VC platforms, and we had no problems using Teams, Zoom and Skype. You’ll be impressed when you first use it as the video display is quite remarkable and noticeably sharper than the Owl 3.
During meetings, it maintained the full-room panoramic view at the top and swapped effortlessly between active speakers in the split screen below. It’s fast, too, taking around two seconds to swap from one active speaker to another, with the slide animation placing up to three participants in the main view. During small round-table meetings, we found a 50% volume level was quite sufficient and remote participants could hear us clearly, even when three meters away from the table.
Pairing the Owl 4+ with an Owl Bar is easy, as you place them within two-and-a-half meters of each other with their front logos facing off and use the mobile app to pair them, after which they’ll use their tracking algorithms to choose the best view. No more looking at the back of people’s heads if they turn away from the Owl Bar, as the Owl 4+ takes over so they’re always looking directly at you.
For fully immersive meetings, nobody does it better than Owl Labs. The Owl 4+ delivers excellent video quality plus super-smooth speaker tracking, and pairing it with an Owl Bar covers every meeting room angle.
This review first appeared in issue 360 of PC Pro.
One of the biggest challenges for Logitech is that its best webcams are expensive compared to no-name rivals on Amazon that have similar specifications. As a recent example, consider the £219 MX Brio 705 for Business I reviewed four months ago.
Admittedly, that was a top-end device packed with features and capable of 4K streaming at 30fps. The Brio 105 is a more modest offering that’s limited to 1080p and a 58° field of view (the Brio 705 offers a choice of three FoVs). But in practice, how much resolution and flexibility do most people need? If it’s only you, sitting at your desk, attending a meeting, 1080p is absolutely fine, and a 58° FoV will place you large in the frame.
More to the point, image quality is excellent. Not just in strong light, but also when I turned off my office light at night and relied on my screen’s backlight. The Brio 105 still did a fine job, without any amateurish artefacts.
The other plus side of buying from Logitech is that the Brio can be managed from Logitech’s mature software, whether Logi Options+ for individuals or Logi Tune for businesses (you can deploy it using Logitech Sync). There’s also a three-year warranty, while the webcam has been certified for Google Meet and Works with Chromebook -and it will naturally work on Windows and macOS with all the usual conferencing platforms. Logitech takes sustainability seriously, too, promising that the plastic parts are made from 77% post-consumer recycled plastic and that this is a carbon neutral product.
From a practical point of view, it’s good to see a basic but functional plastic shutter that you can slide over the lens when not in use, and while the single mic lacks any advanced features, I found it worked fine in a home office environment. The Brio is light enough to sling into a bag, but the whole assembly will come with you as the 1.5m USB-A cable is captive rather than detachable, as is the basic two-part mechanism to keep it in place atop your screen.
Of course, you can save cash by buying a £15 webcam with the same specs. But it won’t perform as well in low light and definitely won’t be as easy to roll out and manage for businesses.
Sihoo has impressed me with their chairs over the last several years. I've had the opportunity to check out several Sihoo chairs recently, and they all look incredible. The Sihoo Doro S300 was the most futuristic chair I had checked out in a long time, and when I opened up the S100, I was giddy because it looked very similar for a fraction of the cost.
Sihoo positions itself as a simple yet ergonomic chair company. The Doro S100 points explicitly towards the budget-friendly side of the lineup -- perfect for those looking for an excellent chair for their home office without spending absurd money out of pocket.
The Doro S100 design aims to minimize strain from prolonged sitting, focusing on providing essential back support and comfort. How does it compare to the best office chairs I've tried? I put it to the test.
Sihoo Doro S100: Price and Availability
The Sihoo Doro S100 is priced competitively around $150 - $200, depending on retailer and location. It's available through popular online platforms including Amazon, Walmart, and the official website of Sihoo. Though shipping fees may vary depending on where you want to ship this chair, it's widely available in the U.S. and select international markets.
Sihoo Doro S100: Unboxing and First Impressions
Sihoo's packaging has yet again proven to be very compact and straightforward. I was able to grab the pieces I needed quickly and easily without wondering which screw to use where. This is largely due to the clear and simple instruction manual and simple included tools. However, if I'm honest, I used my HOTO electric screwdriver to assemble since I have bad wrists from arthritis due to failed reconstructive surgeries years ago.
All chair pieces were securely wrapped, ensuring nothing got scratched or damaged in transit. Which, especially since this frame is white, I appreciated.
Assembly took me about 18 minutes from unboxing to sitting in the chair. Granted, I hustled through the assembly as I was familiar with the Sihoo design language. I saw what was going on without studying the assembly instructions too long.
I was immediately impressed by this chair's similarity to the S300 in feel and look. The lightweight frame and breathable mesh stood out and greatly benefited this chair.
Sihoo Doro S100: Design and Build Quality
Sihoo has done a fantastic job keeping a similar design language across offerings. The Doro S100 has a simple and sleek design, focusing on lower back support. This support is not suffocating nor cumbersome, as the backing is made of mesh that promotes airflow and comfort. The chair is offered in a darker black or the lighter grey I have, and both look great and will last quite a long time.
I've had this chair in my rotations for the last three weeks. At that time, I found myself happy with it overall, and I forgot that it was a cheaper chair because of how comfortable it was. I can comfortably sit in this chair for an entire day of work. However, there is no deep recline option, meaning I can sit up or lean back slightly but not entirely. So, if you want to recline far back, you may not want this chair. Regardless, this chair is an excellent option for those who wish to have some range of motion while working but prefer to stay upright.
The armrests are practical and can be adjusted within a reasonable range. The chair is comfortable for prolonged sitting, although the limited recline may not satisfy those seeking deep reclining functionality. The mesh back provides support for my lower back without feeling constrictive. The cushion is firm, but it isn't excessively thick. Some days, I wish it were a bit thicker with a little more padding, but on most days, it's great.
One thing I appreciate about Sihoo and this chair is that it doesn't have a white base to match the chair. If you're in an office where you wear shoes, the chair frame can quickly get dirty from the bottom of your shoes hitting the chair legs. Thankfully, Sihoo seems to have noticed the same and has put a smooth metal base without a white coating. Further, if you are like me and have kids, I'd be weary of having them around the lighter chair in the worry of spilling something or marking it up somehow. But that's just my OCD speaking. So far, with regular use, I have not seen any color transfer from jeans, seat damage, or wear and tear.
Sihoo Doro S100: Final verdict
The Sihoo Doro S100 stands out as a competent, budget-friendly ergonomic chair that meets basic needs without overwhelming options or features — all while feeling like it's a nicer chair than it is. The Doro S100 is ideal for home office setups or more traditional workspaces if you bring your own or pick your own chair. It’s a practical choice for users prioritizing cost over customization. However, those needing comprehensive adjustability or premium materials may need to look toward mid-range models.
This review first appeared in issue 360 of PC Pro.
While Copilot+ PCs with Qualcomm Arm chips are gaining plenty of attention, there are compelling reasons to stick with the traditional approach. We await the killer app for AI on laptops, and Intel’s Core Ultra chips remain better all-rounders: the x86 architecture is still king on Windows and Intel’s Arc graphics are far more accomplished than anything Qualcomm can offer.
Despite my words of praise for Lenovo’s ThinkPad T14s, there are good reasons for business buyers to remain cautious and stick with a traditional approach. Chief among them is compatibility, as the last thing a business wants to do is a mass roll-out of laptops that are incompatible with key software or the office printer.
For the 11th generation of its x360 2-in-1, HP isn’t ripping up any trees. But what it is doing is packing this laptop with power, with my test system including the excellent Core Ultra 7 155H and 32GB of RAM.
Intel may point to the battery life of this machine as an example of its efficiency, too. In PCMark’s light-use benchmark, which uses a mix of web browsing and office apps, it lasted 17hrs 42mins despite a relatively modest 68Wh battery. Playing video, it almost reached 20 hours.
The low-energy screen helps, with the 1,920 x 1,200 IPS panel peaking at 60Hz rather than 120Hz. It’s tuned for the sRGB color space, covering 96% of that gamut with an average Delta E of 0.78. For this price, I’d have liked the whites to look whiter, higher peak brightness (365 cd/m2 won’t be enough for use in sunshine) and more pixels wouldn’t go amiss, either, as text lacks sharpness.
Where it wins is support for touch: sometimes, prodding a dialog button is the easiest choice. HP provides a large, glass-coated touchpad for more conventional navigation, and it sits beneath a mixed keyboard. In terms of action, the Elite x360 1040 is up there with the best laptop keyboards around. There’s enough resistance to make typing a pleasure, all the important keys are suitably large, and I love its quiet nature: you’ll need to thwack the keys hard to annoy neighboring workers. But I was repeatedly tripped up by the half-height cursor keys, with Pg Up and Pg Dn immediately above the left and right arrows. It felt that whenever I hit a keyboard shortcut (such as Ctrl + left to go back one word) I hit the wrong button.
HP clearly believes that USB-C rather than USB-A is the future, with three of the former ports and only one of the latter. The right-hand USB-C port peaks at 10Gbits/sec thanks to its support for USB 3.2 Gen 2, but head to the left and you’ll find a pair of even faster USB-C/Thunderbolt 4 ports. HP also sticks a 3.5mm jack and HDMI 2.1 connector here, but no physical Ethernet port. Wi-Fi 6E is your networking friend rather than the more forward-looking Wi-Fi 7.
While the CPU’s AI abilities are stuck at a modest 34 TOPS – compared to 45 TOPS for the Snapdragons inside Copilot+ PCs – you can draw upon them when using the webcam, with Windows Studio Effects such as eye contact and background blurring at the ready. The 1440p webcam is top notch, other than a tendency to blow out highlights, and if you need to take photos it can snap at up to 2,560 x 1,440.
The mics can use AI to dial down background noise, while the speakers are among the best I’ve heard on a business laptop.
When it comes to ease of repair, this laptop is a delight. Remove four crosshead screws, slide a pick into the gap and the rear lifts off to reveal a replaceable Wi-Fi card, battery and SSD, though the memory is embedded onto the motherboard. And while the one-year warranty is to be expected, you can buy a Care Pack at any point during that year to extend it to up to five years of on-site cover. HP also provides its Wolf Security for one year, offering an extra layer of protection baked into the hardware.
With a 1.4kg weight and 14.7mm thickness – both above average for a 14in laptop due to the nature of convertible designs – the HP Elite x360 1040 G11 is not going to set pulses aflame with desire. Nor is its matte silver finish. But this is a well-built 2-in-1 designed for practicality, from its port selection to its battery life to its build quality. It’s not an exciting choice, but it is a safe one – especially if you already manage a fleet of HP laptops.
This review first appeared in issue 360 of PC Pro.
While Copilot+ PCs with Qualcomm Arm chips are gaining plenty of attention, there are compelling reasons to stick with the traditional approach. We await the killer app for AI on laptops, and Intel’s Core Ultra chips remain better all-rounders: the x86 architecture is still king on Windows and Intel’s Arc graphics are far more accomplished than anything Qualcomm can offer.
Despite my words of praise for Lenovo’s ThinkPad T14s, there are good reasons for business buyers to remain cautious and stick with a traditional approach. Chief among them is compatibility, as the last thing a business wants to do is a mass roll-out of laptops that are incompatible with key software or the office printer.
For the 11th generation of its x360 2-in-1, HP isn’t ripping up any trees. But what it is doing is packing this laptop with power, with my test system including the excellent Core Ultra 7 155H and 32GB of RAM.
Intel may point to the battery life of this machine as an example of its efficiency, too. In PCMark’s light-use benchmark, which uses a mix of web browsing and office apps, it lasted 17hrs 42mins despite a relatively modest 68Wh battery. Playing video, it almost reached 20 hours.
The low-energy screen helps, with the 1,920 x 1,200 IPS panel peaking at 60Hz rather than 120Hz. It’s tuned for the sRGB color space, covering 96% of that gamut with an average Delta E of 0.78. For this price, I’d have liked the whites to look whiter, higher peak brightness (365 cd/m2 won’t be enough for use in sunshine) and more pixels wouldn’t go amiss, either, as text lacks sharpness.
Where it wins is support for touch: sometimes, prodding a dialog button is the easiest choice. HP provides a large, glass-coated touchpad for more conventional navigation, and it sits beneath a mixed keyboard. In terms of action, the Elite x360 1040 is up there with the best laptop keyboards around. There’s enough resistance to make typing a pleasure, all the important keys are suitably large, and I love its quiet nature: you’ll need to thwack the keys hard to annoy neighboring workers. But I was repeatedly tripped up by the half-height cursor keys, with Pg Up and Pg Dn immediately above the left and right arrows. It felt that whenever I hit a keyboard shortcut (such as Ctrl + left to go back one word) I hit the wrong button.
HP clearly believes that USB-C rather than USB-A is the future, with three of the former ports and only one of the latter. The right-hand USB-C port peaks at 10Gbits/sec thanks to its support for USB 3.2 Gen 2, but head to the left and you’ll find a pair of even faster USB-C/Thunderbolt 4 ports. HP also sticks a 3.5mm jack and HDMI 2.1 connector here, but no physical Ethernet port. Wi-Fi 6E is your networking friend rather than the more forward-looking Wi-Fi 7.
While the CPU’s AI abilities are stuck at a modest 34 TOPS – compared to 45 TOPS for the Snapdragons inside Copilot+ PCs – you can draw upon them when using the webcam, with Windows Studio Effects such as eye contact and background blurring at the ready. The 1440p webcam is top notch, other than a tendency to blow out highlights, and if you need to take photos it can snap at up to 2,560 x 1,440.
The mics can use AI to dial down background noise, while the speakers are among the best I’ve heard on a business laptop.
When it comes to ease of repair, this laptop is a delight. Remove four crosshead screws, slide a pick into the gap and the rear lifts off to reveal a replaceable Wi-Fi card, battery and SSD, though the memory is embedded onto the motherboard. And while the one-year warranty is to be expected, you can buy a Care Pack at any point during that year to extend it to up to five years of on-site cover. HP also provides its Wolf Security for one year, offering an extra layer of protection baked into the hardware.
With a 1.4kg weight and 14.7mm thickness – both above average for a 14in laptop due to the nature of convertible designs – the HP Elite x360 1040 G11 is not going to set pulses aflame with desire. Nor is its matte silver finish. But this is a well-built 2-in-1 designed for practicality, from its port selection to its battery life to its build quality. It’s not an exciting choice, but it is a safe one – especially if you already manage a fleet of HP laptops.
The Electric Standing Desk from Mount-It is affordable for anyone looking to enjoy the health and ergonomic benefits of a hybrid sit/stand workspace. With a 55-inch wide desktop and an easy-to-use control panel for height adjustment, this desk is well-suited for home and corporate office settings, making it an excellent fit for various work environments.
Mount-It is known for its wide range of accessories, including TV mounts, and monitor arms. The company is even behind one of the best standing desk converters we've seen. However, what may be less well known is that they also have quality standing desks at a great price. Having tested out all the best standing desks, I was keen to see how the company's offering stacks up.
Mount-It ESD: Price and Availability
The Electric Standing Desk from Mount-It is priced at $389.99, making it a fantastic budget desk. It has a lifetime warranty and offers free shipping to the contiguous US. The desk has six different finishes, which fit most office décor and styles.
Mount-It ESD: Unboxing and First Impressions
Upon unboxing, the desk components are neatly packaged and easy to assemble. The assembly process is straightforward, with clear instructions and minimal tools required. Right away, my first impressions were that of a sturdy, well-built desk that feels reliable -- despite its single-motor design. The 55” tabletop is spacious enough for a multi-monitor setup and office essentials, though if you are doing two side-by-side horizontal monitors, they may not leave much space on either end. This desk is perfect for a minimal work setup, perhaps just a laptop or a single monitor.
The model I have features a lightwood top and white legs, a sleek color combination that looks good in almost any room I have tried. I go back and forth between preferring a darker or lighter wood, but this light wood and white leg combination is simple, clean, and refreshing.
Mount-It ESD: Design and Build Quality
Specs
Height Range: 29.3” to 47.5” Tabletop Dimensions: 55”W x 29”D Weight Capacity: 154 lbs Memory Settings: 3 Leg Design: 2-stage Speed: 0.8” per second Noise Level: <55dB
The desk features a sleek, minimalist design with a sturdy steel base. The 55” tabletop is made from high-quality materials, offering durability and a smooth surface for writing or using a mouse. The sharp 90-degree edges help make this desk clean and minimal, though it could be dangerous if this is a home office desk and you have kids running around.
The single-motor design supports weight capacities up to 154 lbs, making it suitable for a basic desk setup, though I would only go riding up and down on this desk sometime soon (mainly because I am a good 50lb past the limit.
Sadly, the design lacks some premium features, such as dual motors or more diverse color options. However, that is what you get with a budget desk offering. Yet, the available offerings are not cheap -- they feel more like a bargain.
Mount-It ESD: In use
The single electric motor adjusts the desk’s height smoothly and quietly, allowing you to switch from sitting to standing with minimal disruption. The intuitive control panel features three programmable memory presets for different heights. However, the speed of 0.8” per second may feel slow to users accustomed to faster adjustment times, primarily if they have used other, more premium electric standing desks. Despite this, the desk’s quiet operation and sturdy design make it a reliable choice for everyday use.
My team and I use this desk as a laptop workstation with minimal things on it, and it's perfect. It's super easy and smooth to press one of the preset buttons, have the desk spring to life, and adjust perfectly to the preset height. This has been super helpful for multiple users of standing heights and seated heights with the chair we have at this desk.
Despite being a budget offering, this desk has been surprisingly stable and has survived some beatings from putting some gear down on it too aggressively. Yet, the wood top has held up nicely.
Mount-It ESD: Final verdict
The Mount-It Electric Standing Desk is a dependable, budget-friendly option for those looking to enhance their workspace ergonomics. While it lacks some advanced features in higher-end models, its large tabletop, smooth height adjustment, and basic memory settings make it a solid choice for home and office use.
Built on a zero-trust architecture, it ensures secure access by requiring authentication at each step, minimizing the attack surface. The platform is cloud-native, making it highly scalable and adaptable to modern business needs, which means it's not just a VPN client but a comprehensive security package aimed at businesses and organizations.
Twingate supports device authentication and integrates with single sign-on (SSO) providers like Okta and Azure AD, which simplifies identity management across distributed teams. Besides this, Twingate offers a range of integrations with mobile device management and endpoint protection vendors. You can find the list of their extensive integrations on their site.
Unlike traditional VPNs that rely on a single point of failure, Twingate separates identity, control, and data planes, ensuring higher resilience and security. All user connections are encrypted end-to-end, while user access is granted (or denied) in real-time based on contextual information such as user identity, device security status, time of login, and the user's or device's geolocation. This data is used in conjunction with admin-defined access policies to ensure secure and tailored access control policies.
Speaking of defining policies, all of this is done through the admin console, which is intuitive and features a modern UI. From this web-based management console, admins can get granular, viewing reports and resource usage, and add or remove users. The granularity extends to configuration on a per-use, per-device, and per-resource basis. This allows administrators to enforce strict access controls by applying the principle of least privilege, reducing the risk of unauthorized account access. It also ensures compliance with regulations that mandate higher levels of security for sensitive or privileged accounts.
Twingate tracks all network activity, logging each user's access attempts and providing detailed insights into which resources were targeted. For reporting and logging purposes you can also integrate with logging platforms like DataDog, Elastic, and Splunk for enhanced reporting capabilities. Yet, the platform itself has enough capability for reporting without a need for integrations, unless you have specific needs and requirements.
Pricing & Plans
Twingate offers flexible pricing plans with the entry-level Starter plan costing nothing and allowing up to 5 users and 10 remote networks, making it ideal for small teams or those wanting to explore the platform without a financial commitment. For growing teams, the Teams plan is priced at $5 per user per month, supporting up to 100 users and 20 networks, along with a 14-day free trial and a money-back guarantee.
For larger organizations, the Business plan is priced at $10 per user per month, offering support for up to 500 users and 100 networks. It includes more advanced features such as enhanced integrations and management options, making it suitable for companies with more complex security needs. This plan also ensures scalability, with options to expand as the organization grows.
Finally, the Enterprise plan offers tailored pricing and features based on specific business requirements. Companies interested in this plan will need to contact Twingate’s sales team to create a customized package. The Enterprise plan is designed for businesses with extensive remote access needs, offering the highest level of flexibility, support, and integration capabilities.
Note that if you opt to try out Twingate via the free plan, you will be limited in terms of integrations and DNS capabilities, but all of this is covered in paid plans.
Performance
Due to its design, Twingate offers faster average speeds compared to traditional business VPNs. The maximum and minimum speeds users experience primarily depend on their internet connection. Factors influencing performance include the type of traffic generated, with Twingate using split tunneling to route only business-related data through its network, encryption protocols, and overall network conditions. This ensures efficient data flow and minimizes latency for business activities.
Furthermore, the cloud-based admin console worked to perfection during our test, without any hiccups. We did not experience any slowdowns or crashes.
Privacy & Security
Twingate uses AES-256 encryption and SSL/TLS protocols to secure data transmissions, safeguarding business information from cyber threats. Additionally, it integrates multi-factor authentication (MFA) and single sign-on (SSO) capabilities. The aforementioned split tunneling feature routes business traffic through encrypted “tunnels” while keeping non-essential data flowing through the VPN. Moreover, the fact that Twingate utilizes the Zero Trust approach, means that strict verification protocols require verification of every user and device before granting access, ensuring that only verified entities can interact with sensitive resources.
What’s more, it enables companies to implement the necessary security controls to comply with various regulatory standards such as CPRA, GDPR, PCI DSS, and SOC 2.
Support
Twingate provides support through a ticketing system, messaging, and email. While assistance might not always be immediately available, their comprehensive guides and FAQs are particularly useful for addressing common issues. These resources offer detailed instructions, making it easier to troubleshoot independently. Overall, the written materials and support options can be helpful, but availability may vary depending on your needs and the timing of your request for assistance.
Alternatives
An equally attractive offering can be found with NordLayer Business VPN, which also offers a complete security package, complex security protocols, and a ZTNA approach. We enjoy the UI of NordLayer a bit more, but that is more of a personal preference. However, there are no free plans and you will have to pay a bit more per user. With that, you do get a bit more compared to Twingate though. Its proprietary VPN protocol is quick and secure and you can count on speeds of up to 1Gbs regardless of the pricing plan you go for. It is important to point out that additional features like auto-connect, ThreatBlock, and the Cloud Firewall do set a high bar for the competition, which is why you should consider it if you need more complex security.
Another potential alternative is the Check Point VPN Solution, which is geared more toward larger enterprises that are not afraid to break the bank to get premium solutions. Of course, to be fully covered here, we would recommend going with the hardware + software combo offered by Check Point, since this will ensure you get a ZTNA approach and have access to all of the bells and whistles. The admin console is powerful, with granularity extending from the setup into reporting and across all touch points. While it is powerful, for newer entrants into the field it can be a daunting task to set up the entire system. Pricing is not publicly available, as it depends on the size of your company and the specific needs that you have. But be sure it is not the cheapest solution in the market, but with the offering it has, it cannot be.
Final Verdict
With all that has been said, we can conclude that Twingate is an effective and efficient zero-trust network access solution. If you’re an organization or business looking to secure corporate resources, yet you want to have a remote workforce easily and securely access your resources without causing too much user friction, then Twingate may be the right tool for you.
High granularity, will surely expedite and secure work for organizations in highly regulated industries, which is one area that the company is aiming at. Another benefit is that this complexity doesn’t translate into a complex and clunky UI but an easy-to-use and highly intuitive cloud environment.
Sure, it is not the best option in the market, but it does tick most of the boxes while offering easy scaling which will not break the bank. What’s equally important, you can have your IT department spin up the free version, test out the performance, and see whether it is the right fit for you before deciding to scale up.
NordLayer offers a massive list of features including DNS filtering, network segmentation, dedicated IP, browser extension, smart remote access, and a dedicated account manager - making it one of the most comprehensive business VPN solutions. This multi-layered security approach plays nicely with AWS, Google Cloud, and Azure if you’re looking to integrate it into one of these cloud services.
NordLayer's control panel is highly intuitive, featuring sections for organizing teams, managing servers and gateways, remote access settings, downloads, activity tracking, and device security alerts, making it one of the most beginner-friendly business VPN solutions. From this panel, you can also set permissions and allow network segmentation which is important if you’re looking to restrict access to sensitive data. Network segmentation divides the network into subsections for improved security and performance.
Its Cloud Firewall (FWaaS) offering, brings an additional layer of security, functioning as a cloud security service edge element. Unlike a traditional firewall, the maintenance requirements are low, while its scalability and adaptiveness allow you more flexibility in managing your company’s resources.
If you have a remote workforce, NordLayer has got you covered with a site-to-site networking connection, which basically functions like a secure VPN tunnel between two or multiple networks. There is also Smart Remote Access for the creation of a virtual LAN if you need to grant access to devices on an internal network. An additional interesting feature is the browser extension, which functions as a secure web gateway that allows access to resources exclusively via the browser that has the extension installed and enabled. Moreover, there are desktop and mobile, with both apps designed to be simple and intuitive.
Upon opening, the app presents a list of available servers, allowing you to connect with a single click (though more servers would be a welcome addition). Users can choose between OpenVPN and IKEv2 protocols, and customize features like the kill switch, auto-connect, and ThreatBlock based on their preferences. You can also set up a list of trusted Wi-Fi networks that don't require a VPN. The mobile app offers similar functionality, with the added convenience of automatic server connection. The app’s user-friendly layout and customization options make it adaptable for different preferences and needs, ensuring a smooth experience across both desktop and mobile platforms.
Activity Monitoring reports allow you to get granular with user-level connections that pass through gateways giving you details such as names of the members, devices, and source IP addresses, with activity history and date and time of a particular connection. Device Posture Monitoring further enhances security, where administrators can predefine security rules, and all non-compliant devices are then flagged and removed.
ThreatBlock provides an essential layer of protection by automatically blocking access to malicious websites and ads, shielding employees from phishing attempts and malware. It also filters out intrusive pop-ups and autoplay ads, creating a safer and more productive browsing experience for users.
To round out the feature list, Auto-connect is another feature we found useful. It allows you to set up the VPN to automatically activate as soon as an internet connection is activated. This is often found in personal VPNs, but often rare in business environments, but it can reduce the hassle and worry of employees forgetting to use a VPN.
Pricing & Plans
While not the cheapest option in the market, NordLayer does offer reasonable pricing for the amount of functionality and security you end up getting. The pricing plans are based on a per-user model, with the lowest tier Lite going for $8 per user (yearly subscription option), with a minimum requirement of 5 users which is standard across all plans except the Enterprise offer plan. All pricing plans come with a 14-day money-back guarantee which is great if you’re on the fence and just want to test the product.
The next plan, Core, is $11 per user and comes with a dedicated server with a fixed IP, but also a $40 a month surcharge for this service. The next tier is Premium at $14 per user and also the same offer for the server. Finally, the Enterprise plan starts from $7 per user, but you will have to reach out to NordLayer to get your custom offer, as it depends on your organization’s needs. Core seems to be the best buy plan covering advanced security such as Biometrics, 2MFA, SSO, and enough bandwidth for small to medium organizations.
Performance
NordLynx tunneling protocol allows NordLayer to deliver fast and stable speeds across their VPN service. In terms of VPN protocols, it supports IKEv2, OpenVPN (both UDP and TCP), and the aforementioned NordLynx which is a fork of the open-source Wireguard protocol. Note that all pricing plans offer up to 1Gbs server performance, which of course will vary depending on the server country you’re using. While mostly equal, there can be some drops in Asian countries, at least during our demo test.
Privacy & Security
The logging policy is right up the alley of any corporate VPN, which means that it does not log visited websites but does log each employee's email address, IP address bandwidth usage, and connection timestamps. The platform complies with GDPR and other major privacy regulations, ensuring data security for businesses operating in sensitive industries.
NordLayer secures internet traffic with modern encryption, offers 2FA via SMS or TOTP, and provides SSO options like Azure AD, Google, JumpCloud, Okta, and OneLogin for employee access, enhancing data breach prevention. In terms of encryption, it uses AES 256-bit and ChaCha20 encryption ciphers, which are fairly robust protocols. Most of the protocol settings are set up as default and we would recommend leaving them as is unless you’re an advanced administrator who wishes to set up a more granular policy. Furthermore, there is a kill switch, which acts as a fail-safe mechanism that prevents data leakage in instances where a VPN disconnects.
Support
NordLayer offers 24/7 customer support through both email and live chat on their website. For self-service, users can access a comprehensive knowledge base that includes guides for setup and troubleshooting. These resources are particularly helpful for first-time configurations. Subscribers to the Custom plan with 30 or more active licenses also benefit from a dedicated account manager, providing personalized assistance tailored to their specific needs. This support structure ensures that users have ample help, whether through self-guided resources or direct communication with NordLayer experts.
Alternatives
Twingate is a competitively priced business VPN solution that, like NordLayer, goes beyond basic VPN functionality to include advanced security features. Although its setup process is slightly more complex, Twingate compensates with a free plan for up to 5 users and 1 admin, making it an ideal choice for small teams wanting to test its capabilities before committing to a paid plan.
Perimeter 81, with its Secure Network as a Service model, offers a cloud-based alternative to traditional hardware firewalls and VPNs. It provides robust security features, including network segmentation and zero-trust access, at a comparable price point. This makes it a compelling choice for businesses seeking flexible, scalable security solutions without the need for on-premise hardware.
Final Verdict
NordLayer is quickly becoming a top choice for businesses with remote and hybrid workforces due to its comprehensive security features. The platform offers military-grade encryption, a robust firewall, and a Zero Trust Network Access (ZTNA) model to minimize risks from malicious actors. We also admire its clean, user-friendly interface, making setup and management intuitive. While it’s not the most budget-friendly option—especially when compared to competitors offering free plans—NordLayer’s pricing is competitive given the advanced security it provides. It's an ideal solution for businesses looking for reliable, scalable protection in a remote-work era, with a robust and secure VPN.
Firewalla’s new Gold Pro is one of the best firewalls money can buy. It vastly improves over the previous generation of firewalls, providing twice as much processing power and memory.
Specifications
CPU: Intel Quad-Core N97 at 3.4GHz
RAM: 8GB of DDR4 3200MHz
FLASH: 32GB eMMC
Display: 1 x HDMI
Ethernet connectivity: Two 2.5GbE, two 10GbE
General connectivity: Two USB3.1, one Type-C console
Power Consumption: About 35W
Size: 218mm x 165mm x 44mm
Weight: 1.1 Kg
Connectivity has also been boosted, shifting to four copper Ethernet with two that support up to 10Gb. The unit consumes over 35W with all ports connected, while a cooling fan makes it less reliable in the long run.
The hardware is really half the story of this user-friendly firewall. The software is as polished as one can ask for, requiring just two steps to activate a feature in most cases. Firewalla is keen on adding new ideas in every software release, with recent features such as Wi-Fi tests. The Gold Pro has become more than a regular firewall; as a router, it greatly demystifies network setup and fine-tuning.
The Gold Pro is available in only one variant: one based on an N97 Intel CPU with 8GB of RAM and 32GB of flash memory. The price is steep, just under $1000 (currently at $899 for a limited time), when looking only at the hardware. Firewalla offers cheaper models, ranging from the lowly ARM-based Purple SE to the Gold Plus based on the J4125. All products carry a one-year limited warranty and unlimited software updates.
Firewalla Gold Pro: Design
The Gold Pro ships in a brown box with a 40W AC adapter and a user guide. The white and yellow metal enclosure measures 218mm x 165mm x 44mm and weighs 1.1 Kg, almost twice as big as the previous flagship device. Four rubber feet prevent the Gold Pro from moving if too much force is applied to Ethernet cables. Air vents and four mounting holes are on each side of the unit, while the back contains one socket for power. The unit becomes warm after a while, but the small internal fan makes no noticeable noise.
The front panel contains four RJ45 sockets, two USB 3.0 Type-A, one USB Type-C connector for the serial console, and one HDMI socket. Two recessed buttons on the right allow users to reset and enter recovery mode or reboot. The front LEDs are for the RJ45, showing linkup speed and activity. The status LED on the right comes alive during the boot process and remains off under regular operation. A USB key, which ships with the unit, acts as a security and Bluetooth dongle and must be plugged at all times.
Under the hood, Firewalla provides an Intel N97 quad-core x86 processor to do all the heavy lifting. It is the only processor available onboard, and all network traffic passes through it. The board includes two 2.5Gb and two 10Gb Ethernet MACs from Intel to connect the CPU to the network. Application memories consist of a single channel 8 GB RAM in SO-DIMM format, which can be expanded to 16GB, and 32GB of flash as an eMMC chip.
The Gold Pro's power consumption varies between 17W and 33W, slightly higher than that of the Gold Plus. The fan turns on when the CPU operates at maximum power and is completely silent, making it great as a desktop unit in an office setting. The unit is entirely RJ45-based, so upgrading to fiber is impossible without an SFP media converter. This somewhat limits the utility of the firewall in a home setting, the software supporting PPPoE while most residential Internet is fiber-to-home and thus cannot be connected directly.
Firewalla Gold Pro: In Use
The Gold Pro turns on with power applied to the box. The Linux boot process takes less than one minute, and an LED on the right lights up to show the progress. The software setup requires scanning a QR code at the bottom of the case into the Firewalla mobile app. An Internet connection is needed on the WAN-dedicated port to complete the setup. The Internet port can achieve speeds of up to 10Gbps, keeping the Gold Pro safe from obsolescence.
The Gold Pro can either work as a standalone firewall or as a router behind a firewall. In the router mode, the unit can assign IPs on demand while inspecting inbound and outbound traffic for threats. VLANs have been included for extra security, allowing different networks to reside on the same physical connection. Applications such as VLANs take full advantage of the CPU upgrade, with the N97 achieving over 100% performance uptick over the previous CPU generation.
Firewalla’s mobile application is polished and avoids intimidating the user with too many technical details. The first panel shows the firewall's health status and warnings about potential threats. The mobile app contains features that can be enabled, such as a Wi-Fi tester, VPN clients and servers, or an Adblocker. The list of add-ons, in addition to the threat list, is updated periodically.
Although not recommended, the Gold Pro's software can be customized by the end user through Docker containers. Commercial applications such as unRaid for NAS or home automation can be installed remotely through SSH.
Firewalla Gold Pro: The competition
A good firewall requires constant updates from a service provider. Firewalla’s propositions are more than just good firewalls with regular updates. They are, in fact, network appliances with features such as VPN and ad blocker. These features bring more responsibility from manufacturers on the testing and prevention side since they have more points of failure and potential vulnerabilities.
Many OEM PCs with two or more 2.5GbE connections require an OS like pfSense to work. They usually have a competitive price since one only pays for the hardware but needs a steep learning curve to build a working system. A mobile app is also non-existent, while the threat database usually depends on the open-source community, which isn’t true for the Firewalla Gold Pro.
Firewalla Gold Pro: Final verdict
The Firewalla Gold Pro outperforms its predecessor in terms of processing power by a factor of two, while its 10G connectivity is beyond what most people have at home. The ecosystem, including the app, cloud and threat update services, and tech support, sets it apart from the competition. The mobile app is one of the best available and will make setting up the unit a breeze. Services such as VPN and Adblocker make life easier at home or in the office.
A price tag of just below $1000 means the unit remains beyond what most people are willing to pay for a prosumer firewall. With four Ethernet LAN ports, the hardware can route packets on four high-speed links at 2.5Gb and over. Finally, the system is user-customizable thanks to Firewalla's willingness to open access to the underlying Linux system through SSH.
Buy the Gold Pro if ... you need 10G speed and a fuss-free mobile app.
Don’t buy if ... you are on a tight budget or if saving power is essential.