Brian,
We attempted to set up VLAN's on our network. That was a couple of years ago and I don't remember the specifics, but there were some complications that prevented VLAN's from being recognized properly on some network equipment. We ended up just plugging each network into the firewall directly and have allowed the firewall to keep the networks separate. In my simple mind, there is a certain amount of comfort in knowing that the networks are absolutely, physically separate from each other until they reach the firewall. It was also a lot easier to set up -- we did not have to define VLAN's on every piece of equipment. But I also admit that it is not as flexible/extensible.
I will need to ask our networking guru why we did not go with VLAN's. Maybe we need to try again. Especially if we are going to a new firewall solution.
Thanks for your help!
