I work for a small trustees office, and I came in at the worse possible time. We have 15 users being supported by 6 active servers (not the mention 3 Linux servers that we’ve already taken down) all of which are running Windows Server 2003 with all the current Service packs and updates. The oldest, slowest, smallest server is the most important (of course..) as it is the database server as well as a web server. Now, this is the problem, right now we’re in a transitional phase trying to move the database (SQL) to a new server and format (DBF), this data _must_ be accessible on our webpage, which is done right now real-time. I need to block the web server from passing anything infectious to the rest of the workgroup, and I also need to be able to talk to it to send periodic updates from the database. Right now I have a Linksys RV016 that the servers are hooked into, this switch supports DMZ and port-based VLAN, I dont know too much about either of these options, but after lightly reading into both is seems I’m screwed any way I turn, either with the Server opening the rest of the network to attacks, or cutting off communication completely. Is there any way I can make the web server incapable of passing information to the rest of the network, but still accepting information from the entire network? Should just a basic Firewall installed on the web server suffice? Any help would be greatly appreciated. thanks