D-Link DFL-1600 User Manual page 222

202
Outside the Firewall, on the External Network
(Figure 20.2)
Figure 20.2: VPN Deployment Scenario 2
Benefits
Internet connectivity does not depend on Security Gateway
The firewall can inspect and log plaintext from the VPN
Drawbacks
The Security Gateway is not protected by the firewall
The firewall cannot easily determine which traffic came through an
authenticated VPN and which came from the Internet, unless the
border router can be trusted to do extensive filtering
Special routing information is needed in the firewall
Support for roaming clients is nearly impossible
Between the Firewall and the Internal Network
(Figure 20.3)
Benefits
Supports roaming clients
No special routing information needed in the firewall
The firewall can protect the Security Gateway
Drawbacks
D-Link Firewalls User's Guide
Chapter 20. VPN Basics