I have a new client w/ multiple branch sites using persistent VPN into the main network. They also offer vendors and out-of-office workers VPN access.
For the new service, we said they must include those sites and devices connecting to persistent VPN, but other VPN connections will be on a case by case basis. However since pricing is per device, the customer doesn’t want to cover all devices connecting to persistent VPN to reduce costs.
I understand they are working within a budget, but we have had a policy that “if it is on the network with covered devices it must also be covered”. Do other MSPs require all devices on a network be covered or will you let the customer pick and choose which devices they want covered?