Guidelines For Placing Vpn Servers On Networks

By Author: Shirley Green
Total Articles: 129
Comment this article

There are three places where you can put the CompTIA on the network:
Place the VPN server behind the firewall.
Place the VPN server in front of the firewall.
Place the VPN server between two firewalls on a perimeter network.

Follow these guidelines for placing VPN servers on networks:
Placing the VPN server behind the firewall Guidelines include:
Configure the firewall to allow the PPTP and/or L2TP/IPSec traffic to pass through to the VPN server.
Use the external firewall to filter traffic and direct it to specific resources behind it. Only VPN traffic should go to the VPN server, only Web traffic should go to the Web server, and so forth.
Use the firewall to provide intrusion detection and filter viruses, and use it to prevent denial A+ certification of service attacks from reaching computers on the internal net?work. You must understand that VPN traffic is encrypted and cannot be inspected by the firewall. The firewall can decide only where to send the traffic.
Important The firewall ...
... can filter only on the plain-text headers of the tunneled data. All tun?neled data will be passed to the firewall. However, tunneled data must be authenticated, which will prevent many possible attacks from succeeding.
a Restrict PPTP and L2TP/IPSec traffic so that it is passed only to the VPN rout?ers. The "Firewall Configuration Information To Support PPTP and L2TP/ IPSec VPNs" section provides this information.

Placing the VPN server between two firewalls on a perimeter network Use the guidelines from both of the preceding arrangements. This arrangement pro-vides the best of both worlds because the CCNA certification is protected by the external firewall and the internal firewall can filter the traffic received by the VPN server.