I wanted to know the advantages and disadvantages of placing an SSL VPN with respect to CIA in different locations:
- with firewall
- within the internal network
- within the DMZ
Any reference also would be appreciated.
SSL-VPN shall have at least two interfaces, i.e. external (Internet facing) and internal (intranet facing). You should filter traffic both from Internet to external address (i.e. allow only https connections), as well as from internal to Intranet.
In your terms that would be DMZ1 (aka dirty dmz) and DMZ2 (aka clean dmz).