|
|
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
|
Connection Protection October 11, 2001 URL: http://www.zdnet.com.au/reviews/software/security/soa/Connection-Protection/0,139023452,120261088,00.htm
Protect your PC from intruders with one of these five firewalls.
When was the last time you parked your car in a busy lot but left the keys in the ignition and the motor running? How often do you leave your house with the doors and windows wide open?
Never, of course; we all lock up our property to prevent theft and malicious damage. But if you leave your computer connected to the Internet without any special security of its own, you're leaving it as open to intruders as a house with no locks. Although your PC may not contain information that can change the balance of world power, you'd be amazed at just how much sensitive personal data hackers can find in a Microsoft Money file or in your browser's cookie file.
The best way to protect your PC from Internet intruders is to install and set up a firewall. Corporations usually run expensive hardware-based firewalls to protect their networks, but for the individual's PC, we recommend personal firewall software. Firewall software monitors your Internet connection, alerts you when an outside connection tries to access your system, and blocks that attempt if you want it to. Some firewalls will also alert you when programs on your own PC attempt to access the Internet unexpectedly (possibly indicating the presence of spyware on your system).
We reviewed five popular personal firewalls. All of them shield your PC from unauthorised entry, but one does it better than the others and does it for free.
ZDNet recommends
Feature comparison
ZDNet Labs tests personal firewalls
ZoneAlarm 2.6
ZDNet Review
In today's wired world, Internet access isn't just a convenience, it's a necessity. While Web browsing and downloading are faster than ever, your open connection to the Internet (especially those always-on connections such as DSL or broadband) also makes it easier for outsiders to access your computer, putting your sensitive files (such as passwords or financial data) in jeopardy. ZoneLabs ZoneAlarm 2.6 is a free firewall that protects your PC from unauthorised intrusion by blocking the TCP/IP ports most frequently used by hackers.
Personal or business PC users, especially those with high-speed cable or DSL Internet access, will benefit from ZoneAlarm's solid protection. If you're not planning to use ZoneAlarm for work, download the free version right away. If you're not planning to use ZoneAlarm for work, download the free version. ZoneAlarm works so well that small-business owners should consider forking over US$39.95 for the license.
Setup's a breeze
Easy to use
In our labs' official tests, ZoneAlarm, like most of the other firewalls we reviewed, both closed and stealthed, or hid, all of the ports on our test computer. So, not only will hackers be unable to access your closed ports, they won't even know you're online.
Service and support
ZoneAlarm offers proven Internet protection and event reporting that's tough enough for those interested in protecting their system from intrusion. In fact, it's so easy and thorough that, for the money, it's a much better deal than more expensive firewalls such as Norton Internet Security.
The good: Free; thorough protection against outside attacks; easy to set up and use.
ZDNet Review
All firewalls can block incoming access to your computer, but not all provide the level of two-way protection that Norton Personal Firewall (NPF) 2002 can. This app offers relatively simple installation and setup and protects systems from both incoming and outgoing connection attempts. It not only keeps Web sites and hackers from accessing your system, it also won't allow viruses or any other programs to access the Internet without your knowledge.
Unfortunately, NPF is a bear to configure, so we recommend it primarily for technically savvy folks who know their way around a PC and need detailed security settings. Everyone else will benefit more from ZoneAlarm's simple interface and zero price tag.
Standard setup
Sadly, configuring Norton Internet Security (NIS) takes much more effort. When you launch NIS 2002 for the first time, a wizard walks you through the initial setup process and helps you customise the firewall's default configuration. For example, you can change your privacy settings from Medium to High and decide which Internet applications you'll allow to penetrate the firewall. Unfortunately, we found it confusing to navigate the jumble of configuration dialogs without the manual and some practice.
Lots to tweak
Norton Internet Security's default Medium security and privacy setting blocks any program from accessing the Internet. When a new program tries to access the Internet, a pop-up window asks if you want to permit access. If you choose to save these settings, NPF will remember them every time the same program tries to go online. Eventually, NPF learns which programs you want to access the Internet, and those annoying pop-ups trickle off. The Medium setting also warns you before you send personal information (including your name, address, or credit card number) over the Web, but it doesn't block sites from setting cookies on your hard drive. In many cases, this is just an inconvenience, but some cookies can pose a security threat. If you run NPF with security set to High, the program also prompts you before allowing active content (such as Java and ActiveX Controls, which can create potential entryways into your system) to run and alerts you whenever an outsider scans or tries to access your PC's ports. It also prevents you from sending any personal browsing information and alerts you each time a Web site creates or tries to access cookies. Also, the Reporting slider lets you decide just how much of this information you want to see. Set it on High, for example, and NPF alerts you to any and all access attempts. But all of these protection options come at a price: you'll need to learn to navigate your way through a maze of dialogs to find the settings you're looking for.
Tight security
In our labs' official tests, NPF, like most of the other firewalls we reviewed, closed all of the ports on our test computer and made them invisible to hackers. So, not only will hackers be unable to access your closed ports, they won't even know you're online.
Limited support
If NPF gets too confusing for you, you can find free email support 24/7 at the Symantec Web site. The Web site offers patches, updates, downloadable manuals, FAQs, and a searchable knowledge base for particular questions. Replies to our email came a little faster from Symantec than from McAfee, but the answers were rather short and basic; don't expect lots of hand-holding. There is no free telephone support for NIS, but fee-based support is available.
Solid but pricey
The good: Provides solid privacy protection and two-way defense against unauthorised Internet connections.
Norton Personal Firewall 2002
ZDNet Review
In theory, Internet security is simple: you need to keep intruders out of your PC and allow only authorized programs on your system to access the Internet. Fortunately, McAfee Firewall makes Internet security just as simple in practice. This firewall is easy to set up and protects your system from incoming and outgoing communications on dial-up and broadband services. McAfee Firewall also thoroughly logs and tracks security events, so you can keep detailed records of any threats. This update fixes many of the limitations found with previous versions. For example, you can now block or unblock specific IP addresses. In short, McAfee's attractive interface and feature set are on a par with the other firewalls we reviewed. But McAfee doesn't offer anything you can't get free from ZoneAlarm or Tiny Personal Firewall.
No surprises during setup
Once you reboot your system, McAfee Firewall is off and running. Unless you disable the program, it runs constantly in the background with minimal resource drain, monitoring your Internet connection. If you want to change any configurations or preferences at any time, simply double-click the McAfee Firewall icon in the System Tray to open the McAfee control panel. Version 3.0 uses a colourful, Windows XP-style interface which may confound newbies, but shouldn't be a problem for experienced Windows users.
By default, McAfee filters all data passing to and from your PC and lets you block or allow traffic as needed. If you set McAfee Firewall to filter traffic, anytime a program (such as AOL) tries to access the Internet, McAfee Firewall asks whether you want to permit it. McAfee also warns you when an outside program tries to access your PC. The firewall even lets you personalise alert preferences and sounds. One welcome improvement with version 3.0: McAfee now offers an Activity Log that lets you see an ongoing record of firewall activities; you can clear or print the log. With one or two clicks, you can set what level of access you want each program in the list to have, including block, filter, allow full access, or remove it from the list.
Access denied
Standard Web support
Pass on this one
The good: Easy to learn; shows activity and filter settings in a main window.
McAfee Firewall 3.0
ZDNet Review
If you really want to know who's trying to get into your system, enlist BlackIce Defender. Anytime someone attempts to access a port on your computer, BlackIce traces and identifies the intruder's domain name. But BlackIce is no picnic to use, so to get the most out of it, you'll need to know a bit about Internet security programs. What's more, BlackIce lacks some basic features that its competitors offer: it doesn't prevent programs on your PC from connecting to the Web, nor does it scan email for potentially harmful macros or VBS files. Unless you really need to know who's trying to access your computer, try ZoneAlarm. It's easy to configure, it provides thorough security, and it's free.
Painless installation
Plain-Jane interface
Lots of features, lots of clutter
BlackIce lacks two important features that most of its competitors provide. First, there's no way to block outgoing applications from using the Internet; for example, you cannot opt to prevent an FTP client, such as FTP Voyager, from accessing the Internet, while allowing another program, for example, Internet Explorer, to make connections. Second, BlackIce lacks a feature that scans email messages for suspicious attachments, such as macros or VBS files. ZoneAlarm is the only firewall that scans email.
Abundant support
In our labs' official tests, BlackIce managed to close all of the ports on our test computer. However, whereas the other products we reviewed also stealthed, or hid, the ports from hackers, BlackIce left one port visible.
Only pros need apply
The good: Collects comprehensive data about intruders.
BlackIce Defender
ZDNet Review
When you have access to the Internet, especially over an always-on high-speed broadband connection, your valuable files and sensitive information may be at risk. Without special software to guard your PC, hackers can access your computer to steal files or use it for nefarious purposes--even when you're not around. Tiny Personal Firewall (TPF) 2.0 from Tiny Software protects your PC from unauthorised access by monitoring the TCP/IP ports hackers use to get into your system, then allowing you to permit or deny connections, either at that moment or at any future recurrence. Tiny Personal Firewall gives competitor ZoneAlarm a run for its money, since it doesn't host the same annoying ads. Still, ZoneAlarm's ease of use and thorough security features make it our top pick for home users.
Easy installation
A breeze to use
In the Firewall Administration pane, you can also increase protection to stop your applications from sending out any data and stop outside applications from sending data to you (high security). Or, you can ease protection to allow all communication except those connections you've specifcally restricted in your settings (low security). The Advanced button in the Administration window lets you create and edit filter rules, which, for instance, instruct TPF to deny all future requests from a given IP address. The Advanced button also allows you to adjust the level of detail in alert logs--the history of intruder alert message--and decide how long to store them on your PC.
Another nice TPF feature: the app lets you view the status of all open connections by right-clicking the TPF icon in the system tray and selecting the Firewall Status window. The resulting dialog lists the status of all applications on your system that are sending or receiving data. Although this information may seem cryptic at first glance, it provides a comprehensive summary of which apps are making contact with the outside world. When an unauthorised application attempts to communicate with your system, an alert window pops up. You can then permit or deny the connection or choose to add filter rules so that TPF will know whether to permit or deny that connection in the future.
Comprehensive protection
Numerous support options
Tiny Personal Firewall is a simple and straightforward choice for anyone who needs a firewall on a home PC. Add in the fact that it's free, and it makes sense to download TPF to protect your system from unwanted intrusions.
The good: Free; solid protection against hacker attacks; easy to set up and use.
Feature comparison
Comparison chart
ZDNet Labs tests personal firewalls We began our testing with IP Agent, a free utility provided by ShieldsUp that determines the test machine's current IP address, then contacts the ShieldsUp Web site to begin testing.
Next, the Port Probe utility tested our test system's defense against Internet port scanners. The test originates from the ShieldsUp server and attempts to establish standard TCP/IP (Internet) connections on a handful of standard Internet service ports on the test computer.
The different ports we tested were:
Port 21-FTP Each port gives one of the three following test results.
Stealth: This result means that the probe was not able to find this particular port on your computer. This is the most secure result.
Closed: This shows that the probe was able to detect this particular port on your computer but the connection was refused.
Open: This result means that the port is actively advertising its presence on the Internet. Port scanners will have no trouble finding this port.
More information on these tests and what the results mean can be found at ShieldsUp.
Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved. |
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
