IP VPN Dedicated Design Without a Firewall - COI

[PcJanITor]

Hello All,

We are in the early stages of replacing our current Frame Relay with an IP VPN Dedicated, 2 site Wide Area Network, Hub/Spoke network with Internet access, Full T1, with Lucent AP300 Routers at each location.

In this design (I'm no VPN guru) it states that the Internet access included in design from remote sites to Internet directly without a firewall (Connection Oriented Internet).

What is Connection Oriented Internet?
There is no firewall in the design at all, is this ok?


Just looking for additional opinions.

The Vendor makes this change sound so simple over the phone, but I'm on my guard.

Thanks to all who can contribute!

 

[bf0x]

Im no VPN guru either but to open your business to the internet without any firewall is like lighting a match while standing in a puddle of gasoline. I wouldnt suggest this. I have no knowledge of COI.

 

[netmanrick]

Sounds like a invitation to disaster.

Rick Harris
SC Dept of Motor Vehicles
Network Operations