You may want to consider the concentrator in a dual DMZ scenario. The benefit of putting it in a dual DMZ scenario is not only can you control the outside access, you can also control the resources a remote can see in the inside once a tunnel is established. If you place it behind the firewall, once the remote has a tunnel they have complete access to your inside network.
Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=62363&t=62358 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
