Building a secure business network... What would you use?

[Winchester]

What equipment and setup would you use to build an extremely secure network with internet for about 50 users. Oxymoron... I know. No wireless equipment. Also consider VPN and WWW hosting (possibly on separate incoming connection)

The whole shabang! (firewalls, routers, switches, filters, spam blockers, etc)

Needs to be gigabit.

 

[InlineFive]

This is not something light enough of an issue for a public forum. Especially for a business where liability is a BIG issue. Hire a professional, external company to handle this job.

 

[Winchester]

Not an actual project. Just curious.

 

[vi edit]

It's a balancing act that is dependent upon what you need. With added security comes less convenience and more cost and overhead.

There is no correct answer.

 

[azev]

get a 3rd party encrypting box, that is the best way to secure wireless network.

 

[ktwebb]

" I know. No wireless equipment"
and even more importantly
"Needs to be gigabit."

Wireless isn't a part of the equation for the OP.

 

[Rogue]

It is a loaded question. Throw in a "theoretical" budget and you'll get more responses. Otherwise, it's simply too difficult to recommend anything.

 

[LBmtb]

Hardware firewall (good one), good switch, maybe honeypot, intrusion detection, tight security when it comes to logon passwords and such (min characters w/ numbers, expiration dates, etc), limit times people logon, limit network resources to a 'need to use' basis, keep important servers/firewalls/etc behind lock and key and only allow access for management or yourself.

Tons of stuff . . . .

 

[Boscoh]

Need a budget, type of business, and basic infrastructure needs...do you need Internet-facing servers, voice over IP, how dependent is the company on the Internet, what regulations are they going to be bound by (ie are they health care or finance). There are so many variables here. If the question were that easy to answer, the consultants out there would be in trouble.

 

[Woodie]

IPSEC all your internal traffic...all of the above...

Security is really Risk Management: a balance between Convenience, Cost, Risk and Security. Cost plays a significant role...makes no sense to spend $100,000 protecting an asset that's only worth $20,000.

 

[nweaver]

get some of Cisco's NAC (Self Defending Network) equipment, it's pretty cool.