[VPN] VPN client behind-thru firewall

[Mark D Robinson]

A site to site tunnel would be fine with me, especially since I can then
restrict the traffic to ports used by Citrix (keeping the evil Blasters out).
I'm going to try suggesting that to the client, but I'm not sure if they'll
go for it. For one thing, I don't think we'd be able to use the SecurID
tokens that way.

Thanks,

Mark

-----Original Message-----
Could you aggregate all vpn traffic to a single device (either ask them
to setup a site to site tunnel, or figure out how to by examing their
client config) and then route users citrix traffic to this box? It would
at least make one single aggreation point for incoming vpn traffic and
you could filter/block/monitor accordingly?

-Ken