Which is more secure, Workgroup or Domain for VPN box?

[edutech4schools]

Hi,
I am playing around with a few free vpn apps and will be setting them up on a virtual xp box.

I am wondering which is more secure from an external attack, a) leaving the machine as a workgroup box, or b) joining it to the domain.

If someone gets onto the vpn xp box I would like them not to get any further into the domain.

[plexer]

It should be in a DMZ then in that case.

Ben

[Michael]

It shouldn't make much difference really. I'd recommend you have a robust firewall installed and only allow certain ports.

[nephilim]

A good firewall for VPN is sonicwall. the company my mrs works for has them and I think it is a cracking bit of kit

[jamesfed]

Remote desktop is blocked regardless of network location on our TMG server - as we are using a SSTP VPN the only port we needed to open on our LEA controlled firewall was 443.

As such we have little overall concern but the best point to watch is (as has been said already) getting a decent firewall that will only allow the ports you need.