I wanted to know the advantages and disadvantages of placing an SSL VPN with respect to CIA in different locations:
- with firewall
- within the internal network
- within the DMZ
Any reference also would be appreciated.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
SSL-VPN shall have at least two interfaces, i.e. external (Internet facing) and internal (intranet facing). You should filter traffic both from Internet to external address (i.e. allow only https connections), as well as from internal to Intranet.
In your terms that would be DMZ1 (aka dirty dmz) and DMZ2 (aka clean dmz).