Small Office VPN recommendations

I am trying to help out a side client who three small offices, and each office only has 3-9 employees.  Currently, only his "main" office is the only office with a Windows domain controller server, and the other two office just use remote desktop (terminal server) to connect in.  However, his main office has a residential grade D-Link router and has port 3389 open for the terminal server sessions.  He recently got some sort of DBrute virus, which it seems uses port 3389.  I want to put in new firewalls that connect each office with a hardware VPN.  In my "real" job, we use a Sonicwall firewall, and since I am familiar with Sonicwall products, I am thinking of simply recommending that he purchase a Sonicwall TZ 200 for this main office with the server and two Sonicwall TZ 100 firewalls for his other two offices.  Does this seem like a good option?  The Sonicwall's aren't very cheap, but I assume they are decent products and will be somewhat similar to the older Sonicwall Pro2040 I manage at my real job.  I assume both the TZ 100's can VPN to the 200 permanently?

Thanks for any advice.
LVL 1
jbobstAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

crouthamelaCommented:
VPNs is a much better way than opening ports. Unless they use a whole lot of bandwidth, you could probably get away with TZ100's at each site even. The latest Gen SonicWALLs are way nicer than the older ones, you can't go wrong with them.
jbobstAuthor Commented:
Thanks for the advice crouthamela.  In trying to decipher the specs on the TZ 100 and TZ 200, I was worried that if I purchased all 100's, that the main office wouldn't be able to have two VPN tunnels.  Will the 100's allow multiple VPN connections?  On the Specification page from Sonicwall, it says the TZ 200 has two Global VPN's Bundled and a maxium of 10 clients (do I have to buy additional Global VPN's if my client ever needs to open up another office?).  The TZ 100 has no bundled clients, or rather, it says N/A.  But I do see that is says it can do a maximum of 5.  I guess I am not sure then what I need exactly to have each location connected through VPN.
crouthamelaCommented:
There's 3 kind of VPNs you can configure:

1. Site-to-Site, the TZ 100 has 5 licenses for that. This is what you would use to create an always-up connection between sites.
2. GVC - The old way of doing Remote Access VPN from home or on the road. Install the GVC client software, connect to the site with a username/password.
3. SSL-VPN - The new way of connecting for Remote Access, uses port 443 instead of 500 to make connectivity easier in high-security environments. The client is a lot nicer too.

You are primarily concerned with #1 as I mentioned, so with TZ100's you would be limited to (5) sites/VPNs if you get one for the main site.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jbobstAuthor Commented:
Thanks for the explanations...I totally missed the part about site-to-site connections on the specifications.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.