VPN architecture for POCKET PC

["hassan hani" <amni___ () hotmail com>]

we have tHIS ARCHITECTURE in our network


LAN -------------FW1 ----------FW2------------Internet
                              |
                              |
                             dMZ



we want to implement a vpn for a usage only between a server in the LAN and 
the Pocket PC .

the pocket PC sould be connected to GPRS .

my question is:

where the VPN Gateway should be placed in the architecture above to permit 
security?

how to be sure that there will be no intrusion?