Firewall behind the VPN concentrator 3005

[nuria.villasenor]

Hi,

i have a complex arquitecture in my network, because i have an unique IP public address from my ISP and i have assigned it to the 3005. The 3005 is doing NAT to allow users navigate through it. They ask me to secure the network, because there is another ADSL access. They want to secure both. Would it work fine and be secure if i install the firewall behind de 3005?

Best Regards,

Nuria

[GW6]

Here is a good article for securing a VPN. It talks about a firewall behind the VPN concentrator. It also talks about user security implementations.

http://rr.sans.org/encryption/ACE.php