DMVPN Termination Security-Terminate tunnels at core?

[gokada]

In deploying DMVPN to our remote sites, our head-in router is terminated at the routing core of our network. Would this be the most secure design or should it be edged by a firewall? Please advise.

[#2]

I think deploying a firewall will provide an enhanced security to the data traffic. Ofcourse, security is always a critical factor to be considered while implementing any network.

[gokada]

What advantages are there in deploying a firewall between the head-in DMVPN router (connected directly on the internet and just having ACL's protect it)? I am trying to justify the need to establish a firewall between the head-in router and the core, but, find it difficult to justify. Thanks for your post.