RE: VPN architecture for POCKET PC

["Trevor Cushen" <Trevor.Cushen () sysnet ie>]

I would go with FW2 because using encrypted traffic through two firewalls can be a problem if you are using NAT or PAT. 
 Then put an IDS system between FW1 and FW2.  Hope this helps.

-----Original Message-----
From: hassan hani [mailto:amni___ () hotmail com]
Sent: 30 November 2004 18:37
To: security-basics () securityfocus com
Subject: VPN architecture for POCKET PC



we have tHIS ARCHITECTURE in our network


LAN -------------FW1 ----------FW2------------Internet
                               |
                               |
                              dMZ



we want to implement a vpn for a usage only between a server in the LAN and 
the Pocket PC .

the pocket PC sould be connected to GPRS .

my question is:

where the VPN Gateway should be placed in the architecture above to permit 
security?

how to be sure that there will be no intrusion?



This email and its attachments are solely for the attention of amni___ () hotmail com.  
Please contact Trevor.Cushen () sysnet ie if you receive this mail in error.