Certainly the most talked about security technology is the firewall. As a software service or a hardware appliance, they live at the perimeter of client networks-the obvious place to put firewall technology. It also makes sense to look at internal portions of your client's network for firewalling. For example, financials or the development production network should be firewalled from the general computing population in a client's business. If employees don't have walk-in access to information, they don't need network access to it either.
Segmentation makes it easy to put security in place where it's needed inside the enterprise.
Very often we recommend the use of intrusion detection where a customer has an issue that they can't solve with a firewall. Intrusion detection gives clients visibility into the kinds of traffic moving in and out of their networks. It gives them greater visibility than a firewall can. We often recommend intrusion detection at a point in the network that is already firewalled. The firewall blocks most intrusions, but some vulnerabilities cannot be stopped by the firewall.