Best Practices for Enterprise networks

Hello. I am tyring to gauge what the Best Practices are for Enterprise network connections to the Internet. Specifically, to NAT or not to NAT? At what point should NAT-ting be performed ... exclusively at the Egress point or at decentralized points? What about firewalling - centralized/decentralized? Thanks in advance for any feedback! Tracy Smith tsmith@illinois.net