You mentioned that they already have a cicso. It is probably already in
a position to offer some filtering and would reduce your equipment list if
you could be more specific about it's location in your map.
In addition, You have not provided any detail about the specific
policies that you would implement at the filters. Such as which ports you
would block from outside traffic and why. Provide the policy and then
possibly the technique used to enforce it.
<><Randall Grimshaw, Network Programmer, Syracuse University, 315-443-5779