Internet and servers on the same switch?

[mmaxx]

We are moving our servers to a hosting facility and since they are only providing ethernet fiber internet connection, they are recommending to connect the internet fiber to our stacked 3750 switches on the same VLAN as a pair of ASA5510 FW. Another VLAN will be created for our production servers on the same switches. Is this a fairly common practice of mixing production servers with Internet on the same stackable switches even though they are separated only by a VLAN?

We have no problem spending 2K for another pair of 8-port fiber switches so we can physically separate the servers from the Internet connection OR we are just being paranoid?

Your expert opinions are earnestly requested... Thanks!

 

[mmaxx]

I forgot to add that the ASA5510 firewalls does not have fiber interfaces.

 

[BuckWeet]

Physical security is always the best practice.. If you have the cash, go with that solution..

BuckWeet

 

[krsnavan]

Fundamentally,Y the manageable switches are expensive becoz it has the technology to manage the network traffic to suit the business.If U want to add switches each time U have new requirements,that's not the way IT should be managed.

So, my advice is use the power of VLAN,Private Vlans and Layer3 routing n manage ur environment.

But, still if U worry abt security,Install Syslog server etc. to monitor and creat alarms wen somebody intrudes your network.People still lacks knowledge of monitorng IT envirnment.