Eggs in one basket (VPN in Firewall, UTM)

[Bill Stout <billbrietstout () yahoo com>]

Hello all,

I'm evaluating an existing VPN infrastructure, and am looking at replacement options that can support IPSEC and SSL.

Currently VPN appliances are used for site-site and remote access.  One of the options is to make use of the VPN 
capabilties of existing (SYN/ACK semantic type) firewalls.  

What is the current opinion of adding more services to a firewall vs. deploying standalone VPN appliances?  

Also, what is the current best practice as far as controlling who can get to what via the VPN? (e.g.contractors, 
vendors)

Thank,

Bill Stout
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards