Re: Re: Firewall positioning in Large Network

[evilwon12 () yahoo com]

I agree with Ansgar that you did not provide nearly enough info.  The simple answer is somewhere between the two items 
you want to segment.

Two questions should be:

1.  Why are you buying a firewall?
2.  What asset(s) are you wanting to protect with it? or
2a.  What traffic are you trying to segment?

If you are wanting to isolate those 3000+ users from the Internet, you need to place this behind (your side) of your 
demarc, but between your router and corporate network.  That is all in theory and without knowing how your network is 
setup.