Win2000 as NAT Router/Gateway/Firewall/Member Server

[Guest_imported]

I have a small Network setup with 12 PC's and one Win NT 4.0 PDC. I have not dealth with Win2000 Server installation and configuration so far.

Q1. Does Win2k work with WIN NT server?
Q2. When things I need to be careful when installing it under WIndows NT PDC.

Purpose of Server:
I am planning to make this server as Gateway computer/Router/Firewall.

Gateway to my Private and Public Network.
Router so it can route Traffic between DSL ISP using NIC1
and route it to Private Network on NIC2.

I don't know if how useful win2k is as far as SECURITY
concers. I will try to configure it as a Firewall also.

I also plan to install Nortan anti Virus for Gateways to protect Viruses. I don't how effective it would be to install Nortan Anti Virus for Gateways.

All of my workstations has Nortan Anti Virus 2002.
I am also looking for Anti virus software to Scan Uploads and downloads which currently Nortan doesn't Do. It does
check outgoing and incomming Emails when using Outlook Express. It doesn't support Web-based emails client Scanning.

I need recommandation for Anti Virus Protection Also.

Q Does Windows 2000 server register under Windows NT 4.0 DOMIAN? How it work?

What am I going to make it(win2k) while installing for above mention purpose. Should I make Member of current NT domain. Can I make something else? What is most suitable?

Do I have to install Active Driectory ? I don't know how it works.

Does Raptor Firewall 6.5 is better than Mcafee and Noton firewall?

My data is very critical on File Server/PDC which I need to protect.


Please any help .....
Am I getting myself into too much mess?

 

[axses]

If you are serious about your security, do NOT use any type of windows or Microsoft as a firewall. You are just looking for trouble. Rather setup a small bsd box and configure iptables and ip masq if you need NAT.

None of those firewalls that you mentioned are fit for network use, and rather are designed for home users that have no knowledge of security.

Norton for gateways ( i think it is called that ) would be okay. But again, for networks i adivuise setting up a virus wall in a dmz. Esafe can scan your upload and smtp as well. This type of scannuing is called content Content Vectoring Protocol (cvp)

Exaples of cvp firewalls are as follows.

Check Point FireWall-1
Nokia Firewall
Sun Solstice FireWall-1
Digital AltaVista Firewall
Novell Borderware FireWALL for NT
TIS Gauntlet
Cyberguard Firewall

Here is a quote from f-secure.
F-Secure Anti-Virus for Firewalls scans the essential of Internet traffic (FTP, HTTP, and SMTP) for viruses and other malicious code before they enter or leave your organization. Your employees can surf the Internet and receive email attachments without worring about virus attacks

Good luck

axses@axses.ch