Re: [OT ish] Router vs Firewall - corporate environment

[mj_fitz () hotmail com]

If you are splitting up your network you are likely doing this for security reasons and so a firewall should be the 
ultimate solution or end state.  Where you are on a flat network now, it might be a step in the right direction to move 
to the routed solution but this will not give you all the security you require.

Check to see if "Firewall Features" is supported on your Cisco router.  This might give you more functionality and/or 
buy you some time.

Zoning your organization is a security best practice and limits the protocols by which end users have access to 
corporate resources and information.  It used to be that subnetting was helpful to limit the amount of traffic on a 
collision domain but with packet switching you're good to stay on a flat network from a traffic point of view.  

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------