Just saw this - it was fun to connect in to the board; really brings back memories of how my online experience was back in the day with my 800XL and MPP 1000-E modem...
Shawn Jefferson, on Fri Mar 9, 2012 8:36 PM, said:
This is my day job. Here's what i think you need if you want to do a passable job of it security:
AV
HIPS
NIDS/NIPS
centralized logging/alerting
web proxy/filtering
email inspection/av
admin rights removed where possible
complete patching policy and procedures
app white listing where possible
and all the other basic best practices that are no longer adequate in and of themselves, like firewalls encryption, etc...
Pffft...
This is all you need to deploy at work and be completely safe: