We have bought a firewall (sonicwall nsa) and it comes with 2 SSLVPN license. With it, we also can download NetExtender, which I understood it as establishing some sort of VPN session between the local client and our firewall, and make the local PC part of our LAN. I searched a bit around on the security of this, as I am quite concern that a user's laptop becomes part of our LAN. Supposed this is establishing some sort of IPSec connection? If I understand correctly, the packets are keyed and encrypted and all. Questions:
But I'm not sure what good is that if the user laptop is now part of the entire network? Anything on it, such as virus, is now free to pass to other part of the LAN. Is this safe? If not, supposed the correct use of this is to allow VPN only for "administrated" laptops and PC where proper configurations (firewall, virus checking etc) are configured?
Is SSLVPN (in this particular case I only have Sonicwall's SSLVPN client) a better choice of use in this case? At least, for Sonicwall, their SSLVPN only allows RDP and SSH terminal, restrictive application use? and the local pc does not become part of the network. or it is really not as secure as it seems.
thanks in advance
EDIT: to respond to comment, the purpose for SSLVPN most of our users are to be able to use Remote Desktop.