Secure Local Area Network

[ajsawant]

Hi all,

I need some advise on how to secure Local Area Network while connecting to client network using Site to Site VPN.

The setup is something like this.

We have IPLC link going to US.

We have Site to Site VPN to client using VPN concentrator.

PIX firewall is used to secure tunnel and Checkpoint Firewall is used to secure Communication.

We are using VLANs in our India office.

So can somebody what security constraint should be added in LAN in order to have security.

Thanks & Regards

Ajit

[awaheed]

Hi Ajit,

You can make sure to only allow traffic for specific segments/hosts needed for any of these Site-to-Site tunnels, this will give you the Security you need as nothing additional would be allowed through the IPSec tunnel (other then what we specify). Additionally you can add a Firewall behind your VPN gateway and allow only specific hosts to your inside network.

Regards,

Aamir Waheed,

Cisco Systems, Inc.

CCIE#8933

-=-=-