Personal firewall Products

[myles@tenhand.com]

I looked at 2 personal firewall toasters earlier this week. As
you might expect from the company & price, the watchguard SOHO works
great as a firewall, and even includes some crude logging. I was able
to get IPSEC & pptp to go through it, so I'm happy.

The Linksys Cable/DSL router on the other hand is a very clever kludge.
It's a stateless NAT device, which means that it will happily let you
route packets from the outside back into the inside. To give some sense of
security, Linksys blocks TCP by sniping a RST at both the client & server
of any inbound tcp connection. But UDP & icmp get through just fine. Nice
hardware, laughable security.

miles

On Fri, 21 Apr 2000, Jose Muniz wrote:

> Hello Guys;
>
> Well, not much to this case however i will like to mention that
> Netscreen has a really nice firewall VPN NS-5 that makes probably the
> best solution for the home computing needs.
> It is not a software product, however it gets the job done when mobility
> is not
> in the equation.
> I have tested the beta code 2.0 and it is sweet, and solid.
> If you use DSL there is no question Netscreen is the way to go.
>
> Jose.
>
> Jeffery Eric Contr 95 CS/SCBA wrote:
> >
> > I use ATGuard by WRQ.  It was recently purchased by Symantec and is in their
> > Internet Security 2000 package.  Another good one is Conseal PC.  Info Sec
> > Magazine just gave Conseal it's Editors Choice.  Go to McAfee to get
> > information on Conseal, apparently they were bought up to compete with
> > Symantec.
> >
> > I've used Black Ice but it wasn't that great.  It wasn't customizable and it
> > is more for Intrusion Detection than for Firewalling.  As for Zone Alarm (
> > http://www.zonelabs.com <http://www.zonelabs.com> ) it is good; however, the
> > version I have isn't customizable.  It is really geared for DSL connections
> > because there is a setting that allows you to LOCK your system, basically
> > shutting off the DSL link.
> >
> > You can also check out Newsgroups on Firewalls (I think
> > comp.security.firewalls is one).  There are regular discussions on this
> > topic.
> >
> > Eric Jeffery, MCSE
> > Network Systems Analyst
> >
> > -----Original Message-----
> > From: Jon Carnes [mailto:jonc at haht.com]
> > Sent: Tuesday, April 18, 2000 8:35 PM
> > To: VPN at SECURITYFOCUS.COM
> > Subject: Re: Personal firewall Products
> >
> > Zone Alert (which I'm using right now) is free and works quite well as a
> > personal firewall.
> >
> > I also recommend the hottest new product from Linksys.  Their cable
> > modem/DSL router/Switch costs about $160 and is a true wonder.  It does
> > basic firewalling/NAT and acts as a DHCP server for internal boxes.  It
> > supports up to 250 internal boxes.  The router is also a 10/100Mb ethernet
> > switch which has 4 internal connections and 1 WAN connection.  We've put a
> > few of these at some of our trouble sites.  They are plug-in and Go!  I just
> > can't say enough good things about them.
> >
> > Jon Carnes
> > MIS - HAHT Software
> >
> > ----- Original Message -----
> > From: Brown, Theresa <mailto:theresa at TI.COM>
> > To: VPN at SECURITYFOCUS.COM <mailto:VPN at SECURITYFOCUS.COM>
> > Sent: Tuesday, April 18, 2000 8:19 AM
> > Subject: Personal firewall Products
> >
> > I am attempting to evaluate low-end firewall products appropriate for home
> > users with Cable or DSL modems.  I have found very few in my searches.  I
> > have found Black Ice and a product from Sofaware (which I can't get any info
> > on).  The Black Ice product looks very promising, but I would like to look
> > at others.  I would appreciate any recommendations.
> >
> > Kind Regards,
> >
> > Theresa Brown
> > IT Security Engineering
> > 972-927-8452
> > theresa at ti.com
> > Pager: 214-332-9058
> >
> > VPN is sponsored by SecurityFocus.COM
>
> VPN is sponsored by SecurityFocus.COM
>

VPN is sponsored by SecurityFocus.COM