VPN concentrators

[scouser () paradise net nz]

Off topic slightly, sorry.

Current best thinking is to terminate VPN tunnels inside an external firewall on
a DMZ, then traffic can be passed back through this or another firewall before
entering the internal network.

Complexity can lead to vulnerabilities, so what are peoples thoughts on
termination of vpn tunnels on the firewall itself? What are the  pros and cons
as  you see them?

thanks in advance 
James
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards