Originally posted by: Zugzwang152
Originally posted by: ZeroIQ
Because we are on a few different domains and GPO doesn't transfer down. I'm fine with using Windows Firewall on one network, but it would just make it easier, I think, to run them all on the same firewall and manage them at the same place.
what antivirus product are you using? I'd just pick the firewall offering that vendor has so you can centrally manage through an existing interface. If you're already running multiple domains and such, I'm sure you have enough trouble with management interfaces.
By the way, software firewalls on servers are generally not the best way to go, as they suck up system resources. You should concentrate on your existing hardware firewall and limit access to the minimum necessary there, as well as limit the number of people allowed to manage it.