3

I currently have a NETGEAR FVS338. If I was to connect another firewall of it's type directly to it or to the switch under the first firewall, could I still VPN into the 2nd firewall?

I would like to setup a private network behind the 2nd firewall that can only be accessible on that specific network but still be allowed to access the internet.

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 8 '17 at 14:10
4

You can connect the second firewall directly to the Internet. It is of the same type, so has the same capabilties and can protect itself and the network behind it in a similar way.

If you would like to put the firewall behind the other one, you need to allow the VPN protocols to pass the first firewall. Note, for VPN you may need a public IP address like your firewall for internet has (which usually does NAT).

In my business I have a main firewall and in addition a VPN gateway (of the same firewall type) which provides a lot of VPNs to partners. This VPN gateway is directly connected to the internet. But it's like a DMZ: to enter our internal LAN, it has to pass the main firewall.

So, instead of allowing tunneling through your first firewall, so your VPN user is directly inside your LAN, I would check if it's better to make the VPN directly to a firewall and use the second firewall to protect your internal LAN from the VPN subnets.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.