Isolated VLAN with Exa CPE

[Guest Guest]

I'm looking to setup an always on VPN service for our staff laptops. However, I'd prefer the VPN Server to reside on an isolated network as is best practice. Our firewall is provided by Exa via Link2ICT and is fully managed. I've asked if it's possible for a VLAN to be created on the Exa router and it to be isolated from the rest of the network. They've said an additional VLAN can be created in a different range, however it's not possible for it to be isolated i.e traffic would be free to flow between the subnets which the defeats the purpose of this.

 

I've been given the option of the VLAN or a /30 point to point layer 3 link and handling the routing ourselves (something which I'm not particularly comfortable with)

 

Has anybody had any experience with this type of scenario?, I would approach Exa support directly however, Link2ICT has an agreement with them and so we can't contact them directly

 

Any help is greatly appreciated

[FN-GM]

Have you asked if they can provide a VPN service as part of their package? Most (if not all) firewalls have a secure built in firewall facility.

[Guest Guest]

They do offer a VPN, however this would require user intervention to connect. Due to a recent incident we went all traffic routed via the school so web filtering is enforced

[Michael]

Hi Kieran,

 

Could you drop me a PM?

[Guest Guest]

Pm sent