Network Infrastructure Recommendations

[ac0403]

I'm looking for some suggestions concerning some network upgrades.

Currently, I am supporting a six-user environment (will be expanding). Their network consists of:

Dell PowerEdge 830 Server
* Intel P4 3.0Ghz CPU
* 2 Gigs RAM
* Microsoft Small Business Server 2003 Standard Edition
* 2x 160 Gig SATA Hard Drives (RAID 1)

24 port Netgear Prosafe Switch

I have just ordered a Cisco ASA 5505 (50 user license) to replace the SBS built in firewall (In RRAS). This will provide better security and VPN access for outside sales people.

The company will be moving to a new and bigger office space in January. The new office space has a server room that has the capability to hold all existing equipment. This new office space, is larger than what the company currently needs. They are considering subletting out a section of their office space to another company and possibly including internet access to the tenants. This would require that the other company (tenants) be connected to the network through an IDF/separate wiring closet.

Questions:

1. As I stated above, a Cisco ASA 5505 was just ordered which I planned on using to create VLAN's to separate the two companies. However, I am unsure if using the firewall to VLAN would be possible or a good idea. The Netgear switch has VLAN capabilities so would it be a better idea to VLAN on the switch?

2. Should a new (Cisco) switch be purchased, or would the Netgear switch suffice?

3. Currently the Dell PowerEdge 830 has SBS on it and it is used for a Domain Controller (Active Directory, Domain), E-Mail (Exchange 2003), SharePoint (Company Web, Remote Work Place, etc.), Gateway (will be replaced with ASA 5505), Quickbooks and file sharing. Is the server specs efficient enough for everything that the server is assigned to do?

Thanks in advance for all the help. If any more information is needed, I'll gladly provide it.

 

[skyking]

One of my clients supports about 20 users with a similar server, with no problems. They are still using it for the gateway duties also.

My personal opinion is, let the tenants get thier own DSL. If you must monkey around with it:
Get some additional IP addresses, and place a router in front of your "Cisco ASA 5505 ".

Providing internet does not mean providing security. You want to secure your network with the cisco, and give the tenants access that is totally seperate.

 

[ac0403]

Originally posted by: skyking
One of my clients supports about 20 users with a similar server, with no problems. They are still using it for the gateway duties also.

My personal opinion is, let the tenants get thier own DSL. If you must monkey around with it:
Get some additional IP addresses, and place a router in front of your "Cisco ASA 5505 ".

Providing internet does not mean providing security. You want to secure your network with the cisco, and give the tenants access that is totally seperate.

The company is currently using a cable modem (business grade). Would a router still need to be used or would a switch in front of the ASA be enough?

 

[kevnich2]

Sharing of your cable internet probably is against the TOS of your cable provider unless it is a leased circuit (more expensive). Also with sharing internet, you can't guarantee security, whatever the other company does on the internet connection is your responsibility. I recommend simply having the other company(ies) obtain their own internet service. As far as your server, for the amount of users, that server should suffice just fine for your needs (make sure you are backing up the data adequetely just in case of emergency)

 

[Boscoh]

I'd have them get their own internet connection. What you're wanting to do is technically possible, with the ability to reasonably secure your own network from threats. However, the liability you create (as illustrated above), and the steps you'd need to take to make sure they don't use all your bandwidth would be a lot more trouble than what it's really worth. Plus, it probably violates your TOS too.

 

[Goosemaster]

Originally posted by: Boscoh
I'd have them get their own internet connection. What you're wanting to do is technically possible, with the ability to reasonably secure your own network from threats. However, the liability you create (as illustrated above), and the steps you'd need to take to make sure they don't use all your bandwidth would be a lot more trouble than what it's really worth. Plus, it probably violates your TOS too.

Basically.

It can be done, but tell the people looking for extra revenue at your company that it is simply not worth the hassle and possible liability.