i'm planning to setup some remote IP telephones on our BCM. Currently we have the BCM on the network but no IP phones. We're setting up a site to VPN but we also have spare public IP addresses. Is it a good idea to give the BCM 400 4.0 a public IP in a DMZ and have the remote sets connect to the BCM that way or is VPN smarter. Is BCM 4.0 vulnerable to internet threats (virus, DDOS, spyware, hacking)