Where should the VPN concentrator be installed?

On the cloud
Outside of the network
On the network edge using a firewall
On the network edge without a firewall