RAVPN Zoning

[fatalXerror]

Hi guys, I saw some deployment using only 1 leg (outside only) for their RAVPN and some I saw 2x leg (outside and inside). I just want to know what are the benefits for those 2 kinds of deployment in the perspective of security?

[Mohammed al Baqari]

1 leg is used when you want to get internet traffic from your VPN users
back to HQ then breakout from HQ. This means that all your endusers access
internet from HQ which enables you to put solid security in HQ as one time
and all remote users utilize it.

This is very good security measure along with always on VPN feature to make
sure that remote users are protected. However, end users don't like that
because they don't want to be monitored when they are outside the office

Two legs model is used for remote users to access organization
resources/applications

[fatalXerror]

@Mohammed al Baqari, thanks for the feedback. but in the 1-legged approach you can still configure your RAVPN to have access to the internal resources right? what will be implication of that?

[Mohammed al Baqari]

Yes you can do. In fact everything goes through the tunnel (internet and
intranet). There is no implication. As I said this is the safer approach.