Hello
We have a cheap router being used as a router/firewall/VPN (Netgear $500 device)
We are replacing it with a new advanced router/firewall (PAN $4000 device)
We decided to use the new firewall for all services needed, except the VPN. Our thoughts are that we can keep the VPN services separately on the netgear, since we have it, and to elliminate our current single point of failure.
(We currently have a few point-to-point hardware VPN links to branch offices and a few software client-based VPN connections from some laptops)
My Question is where would the netgear sit on the network?
would it be external on the WAN side as it is now, and the firewall will have to accept traffic?
would it be setup as a DMZ zone under the firewall?
I am not sure what the best way to configure this split from one device to two should be.
Thanks!