> > This is not correct. VPN simply extends security policy to a different > > location. A VPN user must make sure that local security policy prevents > > other traffic from entering VPN connection. > > Given that the head of one of our three-letter-agencies managed to get > this sort of thing wrong, what makes you think that Joe Middle-Manager > who's more concerned about fixing a spreadsheet will get it correct?
Because it is not that difficult. A security policy of a little office is very different from a security policy of a three letter agency. In fact, fixing a spreadsheet could be mode difficult than implementing a security policy for an office with 5 computers that are connected to the Internet. Alex