[XPerties]

A while ago when XP first came out we had this topic. Since then alot of updates and new firewalls were released. I would like to know everyones views on what they use and think is the best one. Please state which ones you have used and the best out of them. We all know hardware firewalls are the best, this pertains to software only.

[Aaron]

I use Kerio because:

• It passes all tests at grc.com (Nanoprobe and Leaktest)
• It passes all tests at pcflank.com
• It shows detailed information of current applications and processes accessing the net and their speed, bit similar to what netstat in command prompt does.
• Its not bloated
• It works 100% with ICS, which ZoneAlarm intereferes in often.

I moved away from ZoneAlarm since they reached version 3, which they re-designed the GUI on it, making it harder to reach the advanced options.

[Tinker]

I have been using ZoneAlarm 2.6 for about a year now. When I upgraded my mother board I got a 90 day trail of Norton's Internet Security 2002. I like it better than ZAP thus far. Easy to use and set up .....

[XPerties]

Tinker, on Nov 11 2002, 01:46 PM, said:

I have been using ZoneAlarm 2.6 for about a year now. When I upgraded my mother board I got a 90 trail of Norton's Internet Security 2002. I like it better than ZAP thus far. Easy to use and set up .....

Norton's Internet Security 2002...does it use alot of resources? have you put it to a port scan?

This info is vitial to the thread, thanks

[renakuajo]

after using za, zapro, sygate, norton and few others I must say: KERIO

[FthrJACK]

KERIO is the best ive ever used, its more configurable than say.. zone alarm, for the more clued up people, it wont be unfamiliar for people more used to a "proper" firewalls configuration.
its just as easy to use as zone alarm without running an application in the back ground like Za does. i found with Za that the "true vector" part of the program would block some ports even when firewall was turned off, and true vector would load with the pc no matter what. it made hosting games a real headache.
on aarons sugestion i tried KERIO and ive never looked back, i love how you can save your rules to file then import them again in case of a format or something, very handy little feature that.
Its free for home use like Za also, and its not as annoying, where as Za is "noisy at first then quietens down" KERIO is noisy at first then it shuts the hell up, fullstop. it wont bug you with stupid warning everytime it blocks some spammers Windows messenger packet or something, it just blocks it and leaves you alone.

[Tinker]

NIS does not seem to use more resources than ZAP.

I am not for sure what you mean by port scan Chris..

[Conan]

I find Sygate Pro to be the best. I haven't tried Kerio though. I'm a former user of NIS 2002. Sometimes that program would have glitches with some web pages and CPU usage would suddenly shoot up to 100%.

[HashDump]

Not to change the original post, but......How many of you are on a fulltime dedicated line?

And if you are on DSL or some other means, wouldn't deploying a router make more sense then a firewall software? or, do some of you employ both?

Inquiring minds want to know w00t

[Drewdatrip]

Im behind a Firewaller router and i consider myself pretty safe..i mena somtimes i cant get thru my own ports! so i dont expect anyone really getting in....

But if people want in softfirewall or not...they will get in...just depends on how bad they want it....



=Drew

[Doggie]

whats some links to firewall soft makers? i'm relatively new to firewalls..

[Rick]

Quote

wouldn't deploying a router make more sense then a firewall software? or, do some of you employ both?

Hash..this is exactly what I was thinking. I didn't orginally think about NAT being so powerful but after getting a wireless network and installing Norton Internet Security 2002, I never get an attack. Not once. I have had to go into configuration and open ports from time to time for the donkey but otherwise everything works. Norton has been very non-intrusive for me. It asks and has s good feature to automatically configure an app with logical settings. I think that even with a NAT you need a software firewall just because some of the progs that you run like to sneak onto the internet to get spyware and crap like that. Also, Norton Internet Security has a great add blocking feature. I also arm with Adaware Pro with the little watcher that detects spyware and bad cookies immediately. I never have probs. Also, Norton Antivirus has not let anything slip through as of date...can't say the same for Mcafee.

The reason I go beyond the firewall is because you gotta get the whole arsenal out if you really want to guarantee no intrusions.

Rick

[XPerties]

guys please read my first post. I stated that hardware was the best but asked you all not to go off on that...this was strickly a software firewall disscussion. Thats all.

[HashDump]

My apologies Xperties

[Rick]

Xperties....I am having some reading difficulties lately! Forgive me for I know not what I do!

Rick

[XPerties]

Tinker, on Nov 11 2002, 05:24 PM, said:

NIS does not seem to use more resources than ZAP.

I am not for sure what you mean by port scan Chris..

theres several out there, heres one I use alot

http://www.dslreports.com/scan

it checks to make sure your ports are protected by the firewall your using

[piaqt]

Doggie, on Nov 11 2002, 11:21 PM, said:

whats some links to firewall soft makers?  i'm relatively new to firewalls..  

[XP FIREWALL GUIDE] source: axcel216
http://support.microsoft.com/support/kb/ar...s/q320/8/55.asp
http://www.megapath.net/support/TechSuppor...t/Natdef.aspICF
http://www.microsoft.com/windowsxp/pro/usi...working/icf.asp
http://support.microsoft.com/support/kb/ar...s/q283/6/73.asp
http://www.dshield.org/clients/windows_xp_...wall_setup.html
http://www.winnetmag.com/Articles/?Article...leID=25348&pg=5
http://www.wown.com/...ig/wxpmdfrw.htm
http://support.shaw..../xpfirewall.htm
http://www.practicallynetworked.com/sharin...ic_firewall.htm
http://grc.com/su-ports.htm
http://www.analogx.c...icles/ipsec.htm
http://www.sans.org/newlook/resources/IDFA...AQ/oddports.htm
http://www.pcflank.c...ts_services.htm
http://www.iana.org/
http://www.iana.org/...ts/port-numbers
http://www.networksorcery.com/enp/protocol.../ports00000.htm
https://grc.com/x/ne.dll?bh0bkyd2
http://scan.sygate.c...tealthscan.html
http://members.aol.c...16/modem.htm#TS
http://members.aol.c...216/toy.htm#MON
http://www.tinysoftware.com/
http://www.kerio.com/
http://www.firewallguide.com/
http://www.firewall-net.com/
http://www.iopus.com...ee-firewall.htm
http://members.aol.c...16/modem.htm#TS