1)Hello. First there are a couple reasons why you want to implement your VPN at the firewall. a) the VPN setup and connection is already part of your firewall software. b) Connecting to the server directly allows unsecured traffic within the network.
Use a VPN to setup an encrypted firewall-to-firewall tunnel directly so you can securly access that server as well as printers, other servers, and other resources available on the network.


2)Screening router firewalls are also known as a network level or packet-filter firewalls. Such a firewall works by screening incoming packets by protocol attributes.

A proxy firewall acts as a gateway for requests arriving from clients. When client requests are received at the firewall, the final server destination address is determined by the proxy software.

What does this mean? Screening routers are a low level process (this packet goes here, that one there), where a proxy is a high level process (this user has these permissions so connect and act as intermediary) . The audit log will reflect this.


3)A firewall is a security device and is designed to prevent penetration. If a firewall is compromised it's usually because it was not set up correctly or left with default settings.

Andrew Randall Computer Expert - 15 years experience.