I appreciate the quick and thorough reply- thanks!
Well, we just don't have the money to build out a server as you recommend. I agree it would be optimal, but we're a small operation and...ah...blah blah blah
A couple of us want live/static net connections cause we work from home. For instance, me: I run PCanywhere over the weekends in case I need to get to my entire computer from home. I run an FTP server all the time for such reasons as well.
Others do many of the same things which require static IP's.
For security, some of us are running ZoneAlarm. Others just rely on wise dload/exe installs, virus checkers, and File Sharing/MS Client being unbound. We don't have secret files or anything, and all important files are backed up overnight to tape (to a non NetBEUI machine).
Then there are those, like sales and admin, who could care less. So them, I want to put behind the NAT to free up IP's as we need them for more technical people. SO what I've done:
Simply made the NAT box with ICS and put it inline at the Production hub. Has two NIC's, one with TCP/IP and a static IP and one with TCP/IP, NetBEUI, and a DHCP IP (from it's own ICS).
So the NIC with the static IP feeds to/from the net. The ICS NIC is the one the other client machines look to for an IP if they're set to obtain their IP's from a DHCP server.
Security-wise, it only helps those behind it- which are Sales and Management. Production is still connected live- but I just hope their 'wisdom' negates any cracking attempts!
I love Sybergen products- good stuff. I use Sygate at home. Before I did, I tried many others (Wingate and such) with such hassles! Sygate was clean and easy- love it (though I need to upgrade my license from 3 user, which sucks cause the next level is expensive! .
Oh, and we do have a dedicated NT server for backups, file storage, and LAN logins, but I didn't want to use that as the ICS server as well. That one really should be behind the NAT...
Anyway, all works well so far. I was worried about a loopback effect, but nothing like it yet! Thanks again for your reply, and hey, nice website