Skip to main content

Timeline for Firewall and VPN configuration?

Current License: CC BY-SA 4.0

4 events
when toggle format what by license comment
Mar 16, 2019 at 12:00 comment added Zac67 For the connections VPN-servers, LAN-DMZ, PC-servers, VPN-DMZ you should disable source NAT on "NAT router". Alternatively, you could place a NAT router (without firewall) in front of your whole network (as the public-private demarcation line) and a combined firewall behind it (between the different trust zones).
Mar 16, 2019 at 11:41 comment added Jay Black Thanks @Zac67. That's really helpful. Do you mean the VPN should be behind the NAT? I did consider this and then instead of having a filtering router, having an edge router with a firewall doing NAT and making the DMZ and LAN two subnets.
Mar 16, 2019 at 11:36 vote accept Jay Black
Mar 16, 2019 at 11:35 history answered Zac67 CC BY-SA 4.0