TAKING DECISIONS ABOUT MY VPN

[internetworking]

Hi!
i have to develop a vpn to connect 21 remote sites to a central office. After studying different option I decided to install a Cisco Concentrator 3005 in the central office and authenticate users against the NT domain. My first question?
Do i need a public IP address for the concentrator?

Now the problem is security in the remote sites.Which is the best choice? The Cisco Integrated Client or is better ZOne Alarm? The access to Internet must be trough the VPN.

Thanks in advance,
Nuria

 

[espIKEkid]

Hi

If your remote sites connect to your concentrator via the internet then you will need a public ip address on it.

You can have the concentrator push out the rules to each remote sites and it supports Zone Alarm.

You can prevent each site accessing the internet and only allow traffic down the VPN.

As for best choice??? I guess so long as it is statefull inspection you are half way there.