Request for directions

[Bill C]

Hello list   I have a client in Seattle that is upgrading their SQL database to interact via xml from two remote offices and various laptops. I am NOT a security expert, and cannot advise them a good way to set this up. I am posting this in the hopes that I can get a bit of direction, and perhaps a refferal.   Details: SQL server currently residing in Seattle office, available via T1. Thinking of co-locating. Alaska and Spokane offices (around 3-5 computers each) accessing via vpn on cable and dsl.  Laptops accessing file server and SQL via IPSec sw client on them, and cisco router at office.   Concerns note lack of firewall.... File sharing, exchange server access and SQL access required with good connection speeds. Laptops (say 6 total) may need to dial into office for all of above from around country.   Thoughts? <G>    Bill Clark