Getting rid of frame and going VPN

[scotton]

I am currently using a 3600 at main location and connecting to two 2600's at remote sites via fram relay. I am designing to change this to a VPN connection and wondering what is suggested. My main apps are Citrix based and will it suffice as my VPN using the 128 bit encryption ?

[noc]

You can install vpn concentrator 3005 series at each site and run a lan to lan tunnel between each spoke site and your hub site. For added security you can

install pix firewalls infront of the vpn conentrator, to insure that only the *right* source even can attempt a tunnel to your vpn network.