VPN access and Internet with diagram

[siscon00b]

Hi All,

I've put together a design for vpn, dmz and internet access. It's a medium site with approx 100 users, a public website and 20 or so remote workers:

https://imgur.com/OAMZwQ7

There is an MPLS VPN connection between branches and i want the internet to be hosted out of site 1 for all branches.

I think there are two options for connectivity:

1) The provider provides internet over the MPLS VPN and use VRF?

2) I connect a public internet connection to the firewall, this will host the www server, can this host the DMZ and corporate outgoing public internet requests?

Thanks in advance.

[Georg Pauwen · Accepted solution]

Hello,

looks like you never got an answer...

Your second option is probably the easiest one to set up: have an Internet connection out of the firewall (HA cluster), which can host a DMZ and provide Internet connectivity for both sites and also the remote users...

If you still need help with the config, let us know...

[siscon00b]

Hey Georg,

Thanks for replying.

I ended up going with the second option, it gave the business more ownership of the configuration of the internet access for potentially greater security. The ISP provided internet just had too many unknowns for my liking. 

Cheers.