Hello, First question: have you deployed a software firewall on your servers (not necessary perimeter hosts but all servers)? How difficult? Do you know any best practices about this? Which software or tool do you use to center administer/monitor your Windows Firewall (advanced Security version or not)? Do you know any next-generation firewall (software to be installed on the server host) allowing users (using Active Directory) and not only IP to access ressources on a server. Palo Alto and Checkpoint (certainely others too) do this at the hardware level. Thanks for any feedback.MCSE 2k3, MCTS W2k8