Internal VPN
To tighten up home network, and to test, I recently made a Wireguard server behind the Sophos firewall. My Sophos Firewall is built on an old PC and I have Proxmox on a little mini PC. The ProxMox server is setup for various services like a Unifi Controller, FreePBX, Wazuh, and most recently a Wireguard server. Essentially, a client at work mentioned that they wanted "everyone to be on a VPN" and a friend was complaining about their VPN not working when they went to the office. Everyone at the shop mocked the idea and said it would not work.... After building this setup with a Wireguard server and setting up some special rules on the firewall to allow VPN access across VLANS, I am convinced this is the best way to segment a network. First you can VLAN everything separating various resources but then to limit access within those VLANS is easiest with the Internal VPN server.

Comments
Post a Comment