firewalls

For doing so, of course you need to determine a few points:
* Which type of machines will be accessible from the Internet, and which will access the Net? Workstations, servers?
* Which platforms are strategic for you?

As BorderManager seems to be NOT strategic for Novell, your choice is amongst fw products running on W2K, Unix/Linux and black boxes like PIX. A few advices:
* For W2K fw's, ignore Microsoft ISA. It has too many major design flaws around DMZ.
* In case access needs to be user-based, opt for a fwall/proxy which can authorise to NDS/ADS through the LDAP protocol. One such is CA eTrust firewall.
* Black boxes might seem expensive but are often most easy to install/configure, and safe.

Hope this helps,

- The Netherlands

Something to consider, are you going to be adding VPN's to this configuration? If so are your remote users going to authenticate to the Novell network. If so are they IP or IPX authentications. If a pure IP environment then I would look at the Netscreen family of Firewall/VPN appliances. They are faster and much easier to configure than other products on the market.
If you are set on adding a software based firewall to WinNT or 2k checkout phoneboy.com for detailed information for securing the operating system.