Configuration in a Firewall (any) and a VPN 3030 at central office

[ateixido]

I would know which topology should I design to make the best performance at the Central Office. It has a Firewall and I have to put a VPN 3000 concentrator in front of it.

( LAN ---- FW ---- VPN3000 --- Router --- Internet )

Cisco Papers say that it's a wrong configuration. Then how should I put it?

( LAN ---- FW ---- VPN3000 --- Router --- Internet )

| |

---------- ???

[ssoberlik]

I was reading in the “Getting Started” guide http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpncon/vcogs/vcogs22.pdf) that it can go in parallel with the firewall. If you have a firewall that supports DMZ’s (like the PIX) you could set it on the DMZ and build conduits to it from the Internet.