PDA

View Full Version : Firewalls! AAAARRRRRGH!



SyrenSong
11-16-2003, 04:02 PM
I installed Norton's Internet Security not too long ago. My inlaws have it on their computer and it seemed like a good program. Since we've recently gone DSL at my husband's office, it seemed like a good idea.

However, the longer it's on the computer, the more problems crop up, and the less enamoured I am with the program.

I'm just wondering what opinions others have on the various firewalls available. What have you got for a firewall? How do you like/hate it? Why? Would you buy it again? Recommendations, please!

Give it to me straight! I want The Good, The Bad and The Ugly!

matauri
11-16-2003, 04:32 PM
I use ZoneAlarm Pro. Have never had any probs with it either. Its user friendly, and seems to be one of the few that hasnt been compromised (or so my resident geek tells me).


Cindy

Sualdam
11-16-2003, 04:34 PM
I've not used Norton personally, but it has a terrible reputation for conflicts and other funny stuff.

I use ZoneAlarm Pro and I've never had a problem of any kind with it.

carbonize
11-16-2003, 05:26 PM
ewwwwww @ both Norton and Zonealarm. Norton is a pain and is far too paranoid and from what I've been told Zone Alarm can be as bad as AOL for messing up your system. I use Sygate (http://www.sygate.com) as it is a simple yes/no firewall but allows you to configure advanced rules. it also lists all programs that are currently connected to the net along with what they are connected to. Best of all it has a packet sniffer which is turned off by default but is usefull for programmers tracking down bugs.

AlexBel
11-16-2003, 06:21 PM
I think it is good idea to use Sygate but I use old program AtGuard.
Rights on this product were bought Norton couple years ago. Now we has that has.
But still now AtGuard version 3.2 is working fine!

SyrenSong
11-16-2003, 11:50 PM
Thanks for chiming in everybody! :)

How do the above-mentioned programs deal with HTTP-REFERRERS?

Norton keeps refusing me access to them. As a result, when I receive a notice regarding, say, a domain registration that needs to be updated or whatever, I can't get access to the secured page when the email tells me to "click this link".

Anyone experience any problems of that kind?

minstrel
11-17-2003, 01:47 AM
I am using Norton Personal Firewall 2003 (along with Norton AntiVirus 2002 and Norton SystemWorks 2002) running under Windows XP - it installed with no problems at all, configured itself 99% automatically, and has done what it is supposed to do without incident and with no conflicts with either the operating system or a wide variety of other software since the day it was installed. I have also installed it to date on three other systems with XP, Win98, and Win ME, with the same positive results.

As with Microsoft, I think Norton software gets blamed for a lot of problems that are actually attributable to an unrelated problem/conflict. On the other hand, it is important that you check that the version you are using is fully compatible with your OS - it is well known, for example, that NPF 2002 is not fully compatible with Windows XP.

rocky1
11-17-2003, 07:14 AM
Likewise running Sygate Personnel Firewall, have for years. It has in fact saved me several times from a Red Hat Attack before Norton Anti Virus recognizes a threat.

As for how it deals with need to access other pages, it simply spits out a little pop-up asking if connection should be allowed, you answer yes or no. Pretty "back to basics" if the program is set up right, problem is most people don't want to be bothered with answering yes or no that often, and select "Always allow." That's okay for something you enter routinely, but not for everything.

Rocky

minstrel
11-17-2003, 09:34 AM
How do the above-mentioned programs deal with HTTP-REFERRERS?

Norton keeps refusing me access to them. As a result, when I receive a notice regarding, say, a domain registration that needs to be updated or whatever, I can't get access to the secured page when the email tells me to "click this link".

I believe there is more than one way to do this but try this:

- Right click on the NPF icon in your system tray and then click on Norton Personal Firewall
- click on Personal Firewall then Configure (lower right corner)
- click on the Home Networking tab and Add addresses of the websites being blocked into the Trusted Zone

minstrel
11-17-2003, 09:36 AM
Via that Configure button, you can also set up b]Custom[/b] security options specifying what gets blocked and what does not by default... You don't HAVE to accept Norton's defaults.

carbonize
11-17-2003, 09:44 AM
Sygate also has the option to block the referer fireld but it is off by default. Outpost is another firewall with this option.

paulhiles
11-17-2003, 10:05 AM
...from what I've been told Zone Alarm can be as bad as AOL for messing up your system.
I disagree... I go along with Cindy and Sualdam, I'm a Zone Alarm Pro user, and I'm very impressed with it. Easy to configure, you can see at a glance what programs are accessing the Internet (and where they're connecting to!). Permissions are split between accessing local networks and external, whether email facility is allowed, etc, etc.
I would say it's significantly improved my browsing experience.. and is nothing like AOL in any respect.
If it was, I wouldn't touch it with a barge-pole! LOL!! :c)

Paul

carbonize
11-17-2003, 10:18 AM
I thikn the problem comes when you try to remove it, same with AOL. It apparently makes changes to your system and doesn't undo them.

matauri
11-17-2003, 10:24 AM
I will check, but I think your wrong Carbonize. Hubby being a sys admin is a freak when it comes to security & anything doing anything on its own in our network. If Zonealarm made any changes to the system, he simply wouldn't use it. He's pretty fussy!

But I will get him to read this thread.


Cindy

burntalive
11-17-2003, 07:58 PM
Well where to start...I have been using Zonealarm almost since its birth. I have to admit the early version did leave things behind...particularly the free versions of Zonealarm right up to version 2.6 which was the last time I used the free version. I can't fault the software it has never given me any trouble and when there has been a problem it was usually me causing it with my tinkering in trying to squeeze every bit out of the software.

The Pro version is very flexible and scalable in that you can tweak it as much or as little as you want. The defaults are good enough for the average person and there are pop ups that alert you to changes in what program is accessing/doing...it can also help in stopping virus attachments in email...the log is very informative and gives you what you need at a glance. There are loads of other features including popup, java, javascript, activeX blocking...program by program or component by component control of what can access the Internet or your own local network. Finally in an emergency there is the BIG RED button to kill all Internet access in and out of your PC if you think you have been comprimised.

I suggest having a look at the product features as I'm sure I have missed some...which can be found here:

http://www.zonelabs.com/store/application?namespace=zls_catalog&origin=catalog_main.jsp&event=link.skuList&&zl_catalog_view_id=201

I think it gives you the best bang for your buck!

Steve

mikmik
11-18-2003, 01:36 AM
http://www.pcmag.com/article2/0,4149,1371002,00.asp
SyrenSong, I thought you might check out PCmag reviews, they look at all the ones being discussed here as well as two others.

I am a fan of freeware and can attest to Sygate as being really quite good for me.

One thing we always have to keep in mind when installing software on our computers is that every enviornment is unique, i.e. - we all have different hardware, OS versions, and 3rd party software installed as well as accumulations of registry garbage and who knows what else.

This is an excellent way to get real world input from people with experience, but I recommend, as many others have here and there, to try 'Free Trial versions' of software first - although many times it doesn't come with full functionality - you still may detect compatability problems.

Two important things to keep in mind are: the power of your computer, namely - amount of ram and type (and clock speed) of processor; and the number of other programs and processes that run in the background while your computer is functioning.
I run Win XP, which is very similar to Win2000 and allows me to very specifically control what runs when my computer starts up, and I use the bare minimum , only activating programs, like email, Messenger, etc., when I need them from the start menu.
Basically just windows and my anti-virus loads and I end up with 18 processes running in task manager.

Hope this helps!

cyanide
11-18-2003, 11:03 AM
I'll jump in the boat with rocky and carbonize.

Been using Sygate Firewall for a couple years now.
Can't say that I'd use anything else.

minstrel
11-18-2003, 11:19 AM
I'll jump in the boat with rocky and carbonize.
Careful there, cyanide. That's Rocky's bait box you're sitting on...

cyanide
11-18-2003, 11:59 AM
I'll jump in the boat with rocky and carbonize.
Careful there, cyanide. That's Rocky's bait box you're sitting on...
heh !
Just knew some-one would respond to that.

carbonize
11-18-2003, 12:03 PM
Just hope it's not the Titanic.