You can control all aspects of Plone’s built-in Discussion module:
- do you want to enable comments at all?
- if yes, do you want to allow anonymous comments?
- do you want to moderate comments?
and various settings to protect your site from spam and malicious content.
For public sites, there are also add-ons available to integrate other comment solutions like Disqus, which have more robust spam protection.
But since these integrate external services, that is usually not acceptable on intranets. Then again, on an intranet, you will have far less trouble with anonymous and spammy commenting, and you may even trust the users there enough to allow posting links.