What are the pros and cons of a VPN server behind or in front of the firewall? There seems to be no right or wrong in either option.

An example of the VPN server in front of the firewall:

enter image description here

closed as unclear what you're asking by forest, Teun Vink, Tobi Nary, Steffen Ullrich, S.L. Barth Sep 10 '18 at 7:57

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 4
    The pros and cons will have to depend on why you have the VPN in the first place. – schroeder Sep 4 '18 at 19:04

I think that would depend if the VPN server is in a public, untrusted network (as shown) or in a network behind another firewall (not shown on the drawing). If the VPN server was on a public network the only benefit of the VPN would be encrypting the traffic between the client and server. The tunnel traffic would still have to be considered untrusted by the shown firewall. Plus the VPN server would be exposed to attack.

It would make more sense to me to place the VPN server behind the shown firewall or in a DMZ behind another firewall (not shown), depending on the level of trust you place on the pcs connecting through the tunnels.

Not the answer you're looking for? Browse other questions tagged or ask your own question.