After sampling the joy of VPN at the office, many customers will want VPN access from home and while on the road. But remote VPN access can give hackers a pipeline into otherwise secured networks.
Every remote user should be equipped with a personal firewall such as ZoneAlarm ($20), BlackICE ($40) or Norton Personal Firewall ($50). Unfortunately, remote users are notorious for disabling such "inconvenient" utilities. One solution: Add a script that prevents opening a VPN tunnel unless a personal firewall is already running.
Gee, why havent VPN client programmers thought of that?