Application requires VPN - How are these handled?

[Michele Jordan <michele () michelejordan net>]

I'm curious how others are handling this situation:

Vendor has an application, that requires VPN access to the vendor's 
network.  I am being asked to install this on a computer and then pass 
that VPN traffic through the firewall.  Obviously, I am reluctant to 
create a VPN from a vendor to the inside of the corporate network, 
regardless of the size or name of that vendor.  I am suggesting we 
implement a machine on a DMZ to do this, keeping that away from the 
corporate network.

Other thoughts?

Thanks

-Michele

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards