firewall

Hi, you will definitely do not want to go with a firewall at the user level. Just start imagine how to support 150 individual pc's with all the settings that are needed for internet and local (file-printersharing)
You need a firewall server like MS Proxy 2 or The ISA server of Microsoft (thats one the software side). Or a hardware firewall like the sonic view (or others of course).
That way you are able to manege all settings from one place and be able to ptotect your corporate environment from one central location.
In addition (since you are mentioning viruses) you will need a exchange server with both the Antivirus for the exchange and the mailfilter so you can filter and exluded on the emails and their attchment since their arrival so the viruses won't come in your environment via emails.

check out the following links:
www.microsoft.com/isa

http://www.microsoft.com/isaserver/partners/default.asp

http://www.msexchange.org/pages/links.asp
(under software)

regards,

leopold

Since the company is not ready to pay much for security, the easiest and cheapest way to handle the problem is to use a software related firewall. My company uses zonealarm pro. Easy to install and use. Go to www.grisoft.com for a good and FREE antivirus program.

For that many users, I would recommend both a hardware and software firewall. Many routers have built-in firewall capability, but not all do. But an independent hardware firewall could certainly be justified in your case. In addition, a software firewall on each desktop might be prudent. Sonicwall, Checkpoint, Symantec, and ZoneAlarm, among many others, are just a few providers of hardware and/or software firewalls. Look at their Web sites for additional information on what they can offer.

Unless you want to reconfigure your network to intercept and/or monitor any and all email and Internet activity, not to mention file transfer via the floppy disk drives in the desktops, anti-virus software on every desktop is a must. If the users aren't savvy enough to run it, most of them can be configured and scheduled to automatically update virus definitions, monitor email attachments and Internet activity, and run a scheduled virus scan of the hard drive - all transparent to the user. But they (the users) should all be brought up to speed on what's going on, and trained on how they can help in protecting their own system. Perhaps a couple of lunch seminars and/or training sessions (instead of one-on-one with everybody) with some anti-virus and virus education themes would be in order.

A server between your local LAN and the Internet, also known as a DMZ, would certainly be an additional level of protection, but not vital - IF all the other measures are properly implemented.

In addition to the answers you may get to this question, doing an Internet search for firewalls will provide hundreds of hits to sites, many of which will provide you a good overview.

Good luck.

Well guys most of the ideas are ok...but remember that most of the users are on sub-networks and independent and again they only answer to the management on internet connection.

The whole show is like every sub-network does their own business and impliment their own IT support/solutions (departmental budgets). The only common thing is the network/internet connection.

We are not suppose to provide mail and data servers...thats their show ( we might be dealing with over 20 domains here!)

Mine is to support the local network/Internet connection...especially on web based e-mail threats.I can write out a memo to all departments with strick instructions with penalties on default for offenders handling mail through outlook....but yahoo,hotmail,etc are the major culprits and i need firewalls to be placed at strategic locations.

Software firewalls ok but can crush with the OS.
Hardware firewalls, will they protect the whole building?