Help - any problems in my dads office network? he wants tomayb upgrade.?

Question

http://i177.photobucket.com/albums/w237/sos1985/NTWK.jpg



me old man is looking to upgrade his office IT eqp, this is current set up,

First - is it safe? if not what does he need to buy / implement etc...

firewall is just a router at present, not allowing people in from the net and stopping employees looking at some types of sites.. (porn i guess, haha)

his webserver is his PDC for his windows domain or something too if that makes any difference..

thanx!

Answer 1

Well if the upgrade is to wireless, it CAN BE safe but it isn't safe straight out of the box.

Anyone connected wirelessly will be on a local domain so you need security to be sure only those who should connect can connect.

You really need a much better firewall than just a router. Either really good router with real firewall built in or another appliance type solution. Yes a router blocks outside to inside traffic but if someone inside were to get a trojan or virus through an email or active page forget the router, it wont block anything. Run the webserver OUTSIDE the firewall with a seperate firewall on it. Dont connect it directly within the LAN -that is the safe thing.

Other than that it looks good to me from a diagram standpoint.

I would be sure that all machines get auto updates for all software and ALL of them have an antivirus installed and upto date. as the webserver, its just simply to open even if it has some protection.

Just as a foot note running the Primary Domain Controller as an open webserver has some risks, they just arent worth it, a second cheap webserver - outside the domain - is much much safer period.