Internet security

[Floyd T. Sweeting III]

Colleagues,

I am a librarian, not a technical person, but I am trying to understand
enough to make intelligent decisions when dealing with Systems people who
are not familiar with library applications and have a more
corporate or business application type of focus. 

This question specifically concerns museum libraries. 

My institution is currently planning a LAN (Novell) which will connect PCs
to one another and to a CD server and to the OPAC (Unix box) and to some
local databases (such as STAR) and to bibliographic utilities (mainly
RLIN) via a leased line to the Internet. 

One question is do we need a separate server to run TCP/IP (Internet 
clients..email, telnet, ftp, web browser) or can those be installed on the 
LAN server?

Another question is re: security...

The library, of course, plans to offer access to our OPAC and in-house
research databases, with a Home Page envisioned at a later stage. 

I am interested in hearing from similar institutions as regards their
Internet security arrangements.  

Specifically, do you use firewall software such as "Gauntlet" in front of
your servers?  Is it worth the expense?  

How was a balance of access (for library resources meant to be shared) vs.
protection (for sensitive museum collection information) achieved?  

Do you provide access to "live" databases (I'm thinking of providing a 
port or two designated for anonymous "query-only" access to the OPAC).  
How is this configured? Where does it sit in relation to the firewall?  

I've heard that the safest option is to run a copy of the OPAC on a
separate server.  Wouldn't this need constant update and be expensive. 

Any advice you can share would be greatly appreciated.


"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"
 Floyd Thomas Sweeting III	        THE METROPOLITAN MUSEUM OF ART 
 Information Resources Librarian        Thomas J. Watson Library         
 Tel: 212 570-3935  Fax: 570-3847       1000 Fifth Avenue    
 E-mail: metart1 at metgate.metro.org 	New York, NY 10028-0198 

"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"~"