Security question...

[primitivo]

Merlin, if we have the VPN Client running at the router to VPN our entire LAN, does this mean that our entire LAN has no firewalling happening at the router and is dependent on our VPN providers firewall?

Yes, I have also just learned that. However the problem is only when you have private IP at your VPN service provider. All ports are opened and exposed, so make sure your PC firewall is on. If it is a shared IP, you are not exposed though.

 

[RMerlin]

Merlin, if we have the VPN Client running at the router to VPN our entire LAN, does this mean that our entire LAN has no firewalling happening at the router and is dependent on our VPN providers firewall?

Long story short: it's complicated, and depends on the actual implementation. You might be perfectly safe, or you might be exposing the router itself, or you might (less likely) be exposing the whole LAN.

It depends on the exact topology of your tunnel provider's setup, but potentially, that might be the case, yes. Depends if they NAT the tunnel or not, what subnet they use, what route they push to you, what is being forwarded, and so on. It's complicated.