Does anyone have any opinions on Firewall Software for a Win 2000 Server, used as a web and email server?
Thanks

VisNetic Firewall is not bad, so I have heard.

http://www.deerfield.com/products/visnetic_firewall/

I tried Visnetic firewall about a month ago and it kept crashing on me when logging off or shuting down. After waiting a week for a response from deerfield support.... they had no clue.

Why not use W2k IPSEC?

Actually, I would recommend if at all possible moving the firewall function to another physical system. Once you've done that, you can look at the Linux solutions that are available and have no licensing costs. Take a look at LRP / LEAF for a very simple and easy firewall solution. You can read more on http://lrp.steinkuehler.net/

By putting another physical system in front of you web server you protect yourself better than running any firewall on the web server itself.

Good luck...