I have the web/app servers in the intranet and the Reverse Proxy in the DMZ. So in effect ..there is the firewall which uses NAT,the reverse proxy server and a bunch of web/app servers(the web/app servers are in the intranet)

Can I use the same set of the above-mention rev-proxied web/app servers for VPN access too? Or should I have another bunch of servers to cater for VPN access...which would be more costly in terms of adminstering, synching etc.

For info sakes, I use Orion 1.5.2