A tough subject to cover without ticking off one group or another... http://www.windowsecurity.com/articles/Network-design-defense.html