I had this discussion with a friend of mine who is a windows sysadmin. He said to me that for his company's IT security, he is doing only updates on the windows server.
But except these system updates that prevent any code injection and are not related to intrusion itself, he is only counting on firewalls capacities to prevent intrusion.
So far, he did not have any massive intrusion from the outside world from what I know (or maybe he is good at shielding info from me, although I doubt).
My question is the following: Is it a sound strategy to rely on firewalls to prevent intrusion? From my early experiences, to have a DMZ or a proxy or one of the other is a must...
Any insights are more than welcomed