Terminating VPN in DMZ

[sstoppel]

I would like to have my Sonicwall Global VPN clients terminate in the DMZ when they connect, and receive a DHCP address. I read some things that seem to imply that:

A. Global VPN clients can't terminate in the DMZ and

B. They can't get a DHCP address in the DMZ either.

Frankly, this stinks if true. I am trying to allow contractors a method to securely access some sensitive systems and I don't want them in my LAN. Can any SW experts confirm or deny this?

Many thanks for the help.

 

[joepc]

Have you checked out the Sonicwall SLL VPN 200/2000? It can sit behind the firewall with 1 internal IP and can be put on any interface. It also has something called netextender. Netextender allows a user to install a VPN client over https with no configuring on the users end.

You can do lots of other remote solutions with it as well.