I generally take a "belt and suspenders" approach to antivirus. A single user connecting a single preinfected computer to your network will render border antivirus useless.
You can do all your firewalling at the border pretty effectively if you are running your inside network on a private address space and using NAT at the firewall. But even with that in place, I also recommend that you activate any firewalling that is built into your operating systems and turn off all unnecessary services. It's another "belt and suspenders" thing.
The firewall can be done on the router to protect the internal network from the outside. This will not protect a machine that is on your network from accessing another machine on your network. If you want to block access from machine to machine within your network, you'll need the firewall on your machine.
The virus scanner needs to stay on your machine.
Denny
MCSA (2003) / MCDBA (SQL 2000)
--Anything is possible. All it takes is a little research. (Me)
Defense in depth. Put as many layers as you can without having them step on each other, and without having the user become unnecessarily hindered. You need to know how hindered "unnecessarily" is.
Hey -
Another level of security that you may want to add, would be a MAC filter, to prevent anyone form jumping into your network and opeinging your network up to viruses, security breaches, etc. Just my 2 cents...
"A grizzly bear with a chainsaw, now that's a killing machine!" - Homer Simpson
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.