Pros and against using Multiple firewalls in a network running on Win2k Advanced server.(repost.. Previous post was missing the subject line)

From: Jorge Roxo (j.roxo@sotagus.pt)
Date: 09/26/01 

From: "Jorge Roxo" <j.roxo@sotagus.pt>
To: <focus-ms@securityfocus.com>
Subject: Pros and against using Multiple firewalls in a network running on Win2k Advanced server.(repost.. Previous post was missing the subject line)
Date: Wed, 26 Sep 2001 09:19:49 +0100
Message-ID: <000101c14664$02a7f480$8e7e12ac@tcsa.sotagus.pt>

We are considering using a multiple installation of firewalls in all our
servers. All servers are Windows 2000 Advanced Server with no IIS as we
have no website or web services other than Internet access and e-mail.
Both Internet and e-mail are accessed via a separate proxy server
running Linux Red Hat 6.1, and it is necessary for the user to
authenticate him/herself before any e-mail or web access is done. The
idea is to establish firewalls between all our servers inside our LAN,
so all traffic inside the network is filtered by the firewalls, and also
as we have several domains, to try and stem the spreading of virus
inside the network ( beside the fact that all pcs have AV and its daily
updated ) by filtering the traffic at the Servers using the firewalls
and the AV.

The question are:

We know it may affect performance inside the network, but…

- Will it slow the network too much? (we are talking about 80 computers
and 4 servers plus the proxy
  server itself, so all told 5 servers)

- Is this possible to implement beside the normal confidence policies?

- Has anyone used this tactic before?

- What could be/are there any more good/bad sides to this idea?

- What firewall would be best? Zone Alarm? Black Ice? Wingate? TPF?

Many thanks for all help and comments.

Jorge Roxo,

TCSA/Sotagus Computer Systems Administrator.

Relevant Pages

  • RE: Pros and against using Multiple firewalls in a network running on Win2k Advanced server.(repost.
    ... Pros and against using Multiple firewalls in a network running on Win2k Advanced server.(repost.. ... gateway and filter the access from/to the internal networks to the servers ... > have no website or web services other than Internet access and e-mail. ...
    (Focus-Microsoft)
  • Re: Pros and against using Multiple firewalls in a network running on Win2k Advanced server.(repost.
    ... Pros and against using Multiple firewalls in a network running on Win2k Advanced server.(repost.. ... In the workstations and the other servers, a good AV with daily updates will do ...
    (Focus-Microsoft)
  • Re: FC3 Security
    ... > In my experience unprotected printers aren't really a problem. ... and our network is very open. ... We do use the software firewalls in each computer, ... servers on the same network as a host of workstations or drop in cubes. ...
    (Fedora)
  • Re: Software Firewall (2003)
    ... > software firewall on their servers? ... > Windows 2003 have the firewalls turned off, citing the usage of a PIX ... > internal attack froma laptop running XP non SP2. ... network, and if it was a domain member, why it didn't have centralized AV ...
    (microsoft.public.win2000.general)
  • Large amount of nbdgram traffic
    ... I manage a small network running Win NT 4.0 servers that is just beginning ...
    (microsoft.public.win2000.security)