AV & Firewall Recommendations for business

[Ttoys]

I'm new to this forum, but what I've read so far leads me to believe I could garner some useful guidance from the resident computer Gods. :)

I work for a small business (only 9 people w/7 active PCs), which does not have an IT department per se. A minor war has broken out regarding AV & Firewall applications. I'm here to try to end the war in a manner that will be beneficial to the company rather than anyone individual and his or her own agenda. I have the support of ownership, and I tend to deal in facts, rather than innuendo and anecdotal evidence.

I believe we have a Win2000 server w/appropriate software which provides us with a LAN. We connect to the outside world via DSL. Most computers are running XP. At this point in time, only a couple PCs have Norton AV and/or Internet Security suites installed.

I would like recommendations for appropriate AV & Firewall protection for the server and PCs. Ideally, I would like factual reasons for each recommendation as we already have pro-this or pro-that opinions from within.

Thanks for your time :)

[PrntRhd]

The recommendations depend on the type of information you have on the PCs and servers.
I would recommend a firewall device be installed between the DSL modem/router and the LAN.
IMHO software firewalls are not enough to protect servers in the enterprise environment and ones like NIS cause real headaches if they shut down ports they shouldn't. The whole idea of a network is to be able to share the files and programs you need, not put up barriers to sharing in the LAN.
http://www.entrepreneur.com/article/0,4621,306653,00.html

All client PCs should have AV on them, corporate version AV pushed by the Server is usually easier to administer and enforce in that environment.

[Ttoys]

Prntrhd, thank you for your response.

We mainly store databases, such as ACT!, engineering code and other documents. My PC currently is home to the company's operating application software...it's a 1-seat license right now, but we have purchased a network license, and will be migrating that application to the server. That application contains our inventory, manufacturing operations, and sales functions. It will eventually handle the accounting & G/L functions.

We certainly do not want to deny employees access to our LAN. We want to protect our 'stuff' from outside.

If you need more info, please let me know. I'll be glad to supply pertinent details. :)

[PrntRhd]

We have some members who are pros at this area of networking, so a day or three may get some good responses.
Firewall devices can be small office devices with basic protection or sophisticated solutions with application-specific inspection of all packets.
A security package including proxy server and intrusion detection software may be required to safeguard the information at the heart of your business.
I can recommend consulting businesses to you via Private Message if you wish (I am not financially connected to those businesses but have had experiences with them in meeting the needs of my customers).

[Ttoys]

Prntrhd, thanks again. Good things come to those who wait, so I'll be patient. :)

[PrntRhd]

I am sending you a recommendation via PM.

[Ttoys]

I'll be on the lookout for it. Thanks!

[PrntRhd]

You will get an e-mail with location for pickup, or you can click Private Messages in upper right corner of the forums where you log your password. I assume you have PM enabled?

[Ttoys]

I believe so. I will checkto be certain.