Some comments from a small network manager (spare time)
Thanks for all the great advice Trevor.
I help manage the IT equipment at our small company (about 25 people) and am currently doing some upgrades. We build industrial control systems but our IT infrastructure is not as modern as it should be. Here are some items I am using:
Our Server 2003 running on a Supermicro MB and Pentium 4 is getting upgraded to Server 2008R2 running on a Mac Mini and VMware Fusion. I would have gone with Server 2012 Essentials but MAS 90 (yuck, not my choice) doesn't officially support it.
Our Linux file server has been running for about the same amount of time (old Fedora system) and has suffered several hard drive failures. I'm upgrading this to a QNAP TS-669L running the new WD Red 3TB drives in a RAID 6 configuration.
I use a Win XP system running Retrospect (Windows multi-server version) with several 2TB drives to backup all our computers. This is a disk-to-disk backup. A LTO tape drive is used every so often to move the backups to tape for offsite storage. I wish this was better but no one has time to do it right. We have too much data to pump it to a cloud solution. I just wish all the email clients out there were like Opera and would use a group of small files instead of one great big file of all the emails. This would reduce our backup storage greatly.
I've deployed several other QNAPs and have found their RTRR sync features very nice to copy file shares to/from our branch office. Our main office has a Netgear ProSafe SRX5308 firewall and it provides VLAN separation between our internal office and service networks with near wire speed packet filtering. This high end router is really needed to match our Comcast 50 Mbps service, lower end routers would not give full speed filtering. I can also limit the branch office QNAP to only respond to our fixed IP address so hackers won't be trying to hack it all the time. I don't VPN our branch office because many services don't run reliably on VPN and I don't have time to handhold users much.
Our web page and email are provided offsite by a hosting ISP to keep this traffic away from our company firewall and reduce my maintenance headaches. I would highly recommend the Mac OSX program, Sandvox, to anyone wanting to maintain a simple HTML5 business or personal web site. While we use a CentOS VM at the ISP with Wordpress for our company site, I wish I had seen Sandvox sooner. No one wants to keep the Wordpress site up-to-date so there it sits just like over a year ago.