Hi everyone! 👋 I've been lurking here for a bit while trying to sort out our team's VPN setup. I'm pretty new to the whole security and access management side of things (my background is more in Salesforce reports and cleaning up our sales data), so I really appreciate this community.
We were using NordLayer for about a year. It was simple and the price was great for our small revenue ops team. But I kept hitting walls when I tried to get more specific with access rules—like, I just wanted our contract management tool to be accessible only from our office IP, but it felt like I was choosing from preset options rather than really building what we needed.
So, after a lot of research (and some nervousness!), we switched to Cloudflare Access last month. My manager definitely winced at the cost increase—it's roughly five times more for our team size. But the control is honestly night and day. I can now build rules based on user email, group, country, or even specific device posture, and it all integrates with our existing Google Workspace. It feels like I went from following a recipe to actually cooking, if that makes sense?
Has anyone else made a similar switch? I'm still learning the ropes of Cloudflare's policies and I'm worried I might have overcomplicated something. Is the cost worth it for tighter control, or did I miss a way to get more out of NordLayer?