Need advice on upgrading firewall.

You could go with Microsoft Internet Security and Accelleration Server 2000(http://www.microsoft.com/isaserver).

This has been certified by ICSA Labs (http://www.icsalabs.com/html/communities/firewalls/certification/vendors/microsoft/index.shtml)and is fully integrated with Active Directory.

Gauntlet is a fine Firewall, if it is meeting your needs and you have someone experience to administer it then keep it. There's no reason to change it to NT/2K just because your client server network will be that way.

If you need more features, or whant to run on NT/2000, checkout Checkpoint or run a dedicated box such as the Cisco PIX.

HTH

Gauntlet is a fine firewall. I would recommend some other changes, however, since you seem to be in the midst of a lot of growth on your network(s).

1 - Move your Proxy and internal DNS off onto a separate box on your internal network.
2 - If you don't already have a DMZ, install a 3rd NIC in your FW and build one. Use this for your SMTP/HTTP/FTP server(s)/service(s).

Obviously patch the Unix and Gauntlet on the FW.

If you're still keen on changing FWs, then what you go to is really a matter of opinion. I personally love Cisco PIX, and can tolerate Checkpoint.

Feel free to give me a call or email if you wish to get more information on the Check Point Firewall. Check Point is the premier FW application with superior features and functionality. Check Point has over half of the FW market. I am with Intelligent Connections, a Check Point Premier Level Partner.

Brian Rose
bcrose@intelligentconnections.net