Greetings,
I've tried to go through the knowledge base info, but there were so many returns for so many years, I see it in my best interest to ask the question, perhaps again...
I'm looking into network intrusion prevention options for my environment and would love recommentations from my peers out there that actually work with the solutions. I have plenty of 3rd-party contacts that like to encourage the products that they are partnered with. While understandable, it's not necessarily in my best interest.
Anyhow, I've got a Microsoft shop that consists of a single forest/site/domain that is centralized. I have 400+ users that connect mostly via remote access. Most remote offices are connected via tunnels between a WatchGuard Core X1250e and WG SOHO endpoints. Other remote offices are connected via Sprint MPLS network, with Cisco routers on each end. The WG Core controls all internal traffic. I have a DMZ on the Core, which hosts our public web server. My mobile clients access the network via WG MUVPN software clients. I do NOT want to put anything on the Core itself (hence, I haven't looked my into WG solutions). While it meets my needs for network management, I don't want it resource challenged. I'm looking for a solution that will protect my network from the inside out. Currently, I have a lot of laptops that leave my network and then come back in and simply get scanned for viruses. Definitely not ideal. I do have budget restrictions, so the best bang for the buck is important to me. While I'd love to have the complete solution in place that protects every means of access to my network, I realize that I may not be able to accomplish that all at once. Therefore, the solution should be able to be tiered, with core protection being implemented and then the ability to add to it as time/funds become available. I've been reading a bit into Citrix, Sonicwall, Cisco, and CheckPoint, but I see that there are many others and I don't simply want to focus on what comes up in a Google search.
I appreciate any suggestions that you may provide so tha tI may research further.
Thank you,
Jer
