[FW1] VPN-connection with small networks

[juergen.deitermann@FW1-NOSPAMrcg.de]

Hello,

I use a FW1-Host on NT with 4.1 SP2. We use VPN with 3-DES and IKE. Until now,
only Notebooks uses the VPN-connection and it works fine. We have a special
agreement with our provider, so that the notebook-users can only connect with
IPs in our DMZ, they cannot connect directly to any other internet-host. When
they want to surf, they have to connect over VPN to our proxy in our DMZ.
We have some external small Networks (<10 Hosts) and I plan to connect them with
a dial-up-router (cisco....) to the internet. I would configure the router  to
allow only data to our FW-1 with the VPN-Ports. The router would have a dynamic
IP. Then I install on the PCs in the small network (hidden IPs !) the
SecureRemote-Software. So the PCs should get a VPN-connection to our "big
network".
Is this a usefull plan ? What is about security ? How can a hacker hack this ?

Thanks in advance and excuse my bad english ;-)

J. Deitermann




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================