RE: Software Firewalls

[<Lance.Druger () wellsfargo com>]

ZA is what I'm running now; the OS firewall slows down everything. Turn
it off and see if your apps speed up. On a 3.2 GHZ P4 w/ 2GB RAM it's
slow, that and no IDS. :(

Nice to know about McAfee, I'm seriously looking at them. I'm just not
happy w/ ZA.  Sygate was awesome, even caught a worm attempt on an open
port (port forwarded) and locked out the attacker while I was at work.
Too bad it's discontinued.  If Norton was bright they'd drop their
firewall and just offer a re-branded Sygate.

Lance Druger
(925) 674-7314


-----Original Message-----
From: Chip Weber [mailto:weberac () cox net] 
Sent: Monday, September 26, 2005 3:34 PM
To: Steve.Cummings () barclayscapital com; Lance.Druger () wellsfargo com;
security-basics () securityfocus com
Subject: RE: Software Firewalls

Sorry to hear about Sygate.....it was one of the most feature rich
programs.
Norton has improved, but I use combination of ZoneAlarm and TrendMicro.
ZA is version 6.0.667.  An earlier version was buggey.  McAffee has been
known to have holes in the past....not sure of current status

-----Original Message-----
From: Steve.Cummings () barclayscapital com
[mailto:Steve.Cummings () barclayscapital com] 
Sent: Monday, September 26, 2005 2:00 PM
To: Lance.Druger () wellsfargo com; security-basics () securityfocus com
Subject: Re: Software Firewalls

Hmm only two I can recommend

Mcaffe I think is called 
Esm or iss desktop protector
 

-----Original Message-----
From: Lance.Druger () wellsfargo com <Lance.Druger () wellsfargo com>
To: security-basics () securityfocus com
<security-basics () securityfocus com>
Sent: Thu Sep 22 20:35:29 2005
Subject: Software Firewalls

I'm personally (not the company I work for) looking for a new software
firewall.  I was using Sygate as it has an active IPS and excellent
logging,
but it was purchased by Norton and has been discontinued. 

- Zonalarm - 6.0 is unstable and lacks an IPS and the OS firewall slows
the
PC down, and creates shutdown delays of over 2 minutes on a virgin
install
of Windows

- Norton tends to litter the registry, but feature wise may be the best
option.

- Kerio has ceased development 

I have a NAT router, but really need a software firewall (paid is fine)
with
the following features:

Required:
Windows XP Compatible
IPS - unattended active shunning of users that attempt hacking activity
Does not slow traffic significantly
Bi-directional
Actively being improved/updated
Advanced rule creation
A decent (but not completely intuitive) interface
Program access control (preferably w/ MD5 hash)
A minimal IDS (logging suspicious activity)
Resistant to various "leak test" type attacks

Desirable:
Small memory footprint
Clean uninstall


Any recommendations or experience with the Norton product would be
greatly
appreciated?

Lance Druger

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.4/109 - Release Date:
9/21/2005
 



------------------------------------------------------------------------
For more information about Barclays Capital, please
visit our web site at http://www.barcap.com.


Internet communications are not secure and therefore the Barclays 
Group does not accept legal responsibility for the contents of this 
message.  Although the Barclays Group operates anti-virus programmes, 
it does not accept responsibility for any damage whatsoever that is 
caused by viruses being passed.  Any views or opinions presented are 
solely those of the author and do not necessarily represent those of the

Barclays Group.  Replies to this email may be monitored by the Barclays 
Group for operational or business reasons.

------------------------------------------------------------------------