Plug VPN Holes
After sampling the joy of VPN at the office, many customers will want VPN access from home and while on the road. But remote VPN access can give hackers a pipeline into otherwise secured networks.
Every remote user should be equipped with a personal firewall such as ZoneAlarm ($20), BlackICE ($40) or Norton Personal Firewall ($50). Unfortunately, remote users are notorious for disabling such "inconvenient" utilities. One solution: Add a script that prevents opening a VPN tunnel unless a personal firewall is already running.
Gee, why havent VPN client programmers thought of that?