Best Place for VPN

[xdxml12]

Hi All,

I have an internet router, and Im planning on placing an IPS right after my router to inspect incoming traffic. If this is the case, and I need to terminate my VPN, where would be the best place, it would have to be before the IPS because IPS wont be able to read encrypted traffic.

Thanks

 

[imbadatthis]

yes your router would be your VPN head end, traffic hitting the router would pass through the IPS to go to your internal network.

you can create multiple vrfs (assuming your router supports it),
one for your VPN, then sending the traffic from that VRF to the IPS and back to your router's internal VRF to hit your internal network if you only have one router currently.



We must go always forward, not backward
always up, not down and always twirling twirling towards infinity.