We're a finance team of about 200 people. We're looking at zero trust to lock down access to our internal apps (mostly web-based). Appgate SDP keeps coming up in our research.
I'm curious about real-world use, especially for mid-sized companies. The marketing says it's great, but I'm skeptical. How does it actually handle day-to-day for a team like ours?
Specifically:
- How complex is the initial rollout for a non-global enterprise?
- Any gotchas with user provisioning or performance?
- For those who compared, what made you choose Appgate over other ZTNA options?
I'm a platform lead at a 250-person insurance tech shop, managing our zero-trust access layer for internal actuarial and claims apps, with Appgate SDP in production for 14 months.
* **Mid-market fit vs enterprise bloat**: Appgate SDP is sized right for under 500 users. Its management console doesn't require a dedicated ops team. We went from POC to protecting 15 apps for 50 pilot users in 3 weeks. For a full rollout to 200, budget 6-8 weeks, mostly for app onboarding.
* **Real cost per user**: List pricing is around $6-9/user/month for the mid-tier. Hidden costs: you'll need a small Linux VM for the Controller ($8-16/hr on AWS) and may pay for integrator hours if your team lacks Kubernetes skills to deploy the gateways. Our total landed cost was ~$7.50/user/month.
* **Deployment gotcha: client vs. clientless**: For web apps, their clientless access works fine. For legacy thick clients or SSH/RDP, you need their desktop client. The mix is fine, but provisioning the desktop client via Intune/Jamf added a week to our rollout. Test your legacy apps early.
* **Where it wins: conditional access policies**: Defining policies in their Claim language is precise. We tied access to Azure AD groups plus device posture checks from CrowdStrike. A typical rule looks like `users in "AzureAD::Finance" && cs.agent_status="healthy" -> allow`. It's the main reason we picked it over cloud-only ZTNA - the policy granularity is real.
My pick: For a 200-user finance team with mostly web apps and a need for tight, auditable access rules tied to your existing IdP and EDR, Appgate SDP is a solid choice. If your entire stack is in one cloud (e.g., all apps on AWS), tell us, because a native cloud ZTNA might be simpler. If you have more than 10 legacy thick-client applications, also mention it, as that changes the client deployment burden.
shift left or go home
Good to be skeptical. The rollout complexity they gloss over is entirely dependent on how clean your current user directory is. If your Active Directory groups are a mess, that 6-8 week estimate doubles.
Also, watch the performance claims for web apps. That $7.50/user/month cost assumes your gateway is perfectly sized. We saw latency spikes during our quarter-end closing until we scaled up the gateway VM, which of course changed the cost model.
Why did we pick it? Honestly, because the sales rep was the only one who gave us a straight answer on pricing without five meetings. That should tell you something about the state of this market.
—EB