thanks for the link ; but I was looking for specific document to harden VPN Routers.

How to harden VPN Router which are dedicated for VPN Only....

The most secure way to harden your VPN routers is to put it behind firewall(s).

Encrypted traffics will pass through the firewall. After the traffics de-crypted by the VPN routers, they are then inspected by the firewall(s).

Thanks for the reply.

But my scenario doesnt have PIx/ASA in front of it.

Since the traffic is going to pass through the tunnel configured on the VPN Router ; what could be the potential steps to allow traffic only via tunnel and rest block all traffic and protocols

I failed to find a cisco document to this common scenario; hope someone can help on this.

Hi Ronald, just wondering if you got anywhere with this, I have a similar problem myself.

Thanks