Barracuda Networks SSL VPN, Руководство администратора

Страница: 15 / 124

VPN Concepts 15
Barracuda SSL VPN Configurations
Barracuda SSL VPNs can be placed either outside your DMZ behind your organization’s network
firewall, or within the DMZ itself:
Typical Deployment ........................................................................... 16
Other Deployments ............................................................................ 16
Table 2.2 shows when each deployment type is recommended.
Table 2.2: Deployment Type Details
Configuration Advantages
BEHIND your corporate firewall
(Typical Deployment) Allows all authentication to be handled by the Barracuda SSL VPN.
Only ONE firewall rule is needed to allow only secured traffic into
your internal network.
BEFORE your corporate firewall
(inside a DMZ) Added layer of security, but will require additional firewall rules
configured on both sets of corporate firewalls.
Note
For specific information on the steps required to add new messages to the Barracuda SSL VPN,
see
Basic Terminology on page 14.