Securing Exit Points

I work at a small manufacturing company that has not been very concerned
with extreme security measures.  However we have been purchased by a
much larger corporation and now must master SOX compliance.

Auditors insist that we must secure all exit points which could allow
data to be updated.  Must do this ASAP.

1st question is how do I figure out if any of our network applications
can be turned off?   Easier than that - how do I find out which has been
started and by what mechanism?  I know I need FTP, ODBC, and Telnet but
some of the others I don't know enough about them.

2nd question:  It's pretty obvious that I'll NOT be writing any exit
point programs so we are trying to find a vendor that can supply us with
a complete set of software to help us secure our system (Model 720 at
V4R4).
So far PowerTech NetworkSecurity looks pretty good.    Are there others
that are recommended?

We must also secure same network security holes in our WIN severs.  Any
suggestions would be appreciated but probably should go direct to me.

I'm about 80 miles NW of Washington D.C..  <Waynesboro PA> Any skillful
security consultants may contact me direct.   Possible short Gig. 

Working way too much on SOX,
Greg Wenzloff