I have a requirement to connect upto 200 remote satellite offices to a HQ office using a thin client solution over a VPN.
I will be using Citix Metaframe to access the application from the client, using the ICA protocol, and this uses approx 20Kbandwidth.
My initial thoughts are to connect the clients to the net using a capped ISP service, then use Windows 2K Pro VPN client to to connect to the HQ and then establish the ICA session.
At the HQ end utilise a 4Mb pipe to the Internet,and a Cisco PIX firewall with ports open for PPTP to allow the VPN traffic through.
I am going to deploy a farm of Citrix servers (2/3 servers) for the applications.
My questions are :-
Should I employ an additional server to act as the VPN authentication server (IAS)?
If so do I put this server behind the firewall or in front or a DMZ ??
Is the PIX overkill or is there a better alternative ?
Am I miles on this ?