 | |||
|
|
ZDNet Rating: ZDNet Review
| |
If you really want to know who's trying to get into your system, enlist BlackIce Defender. Anytime someone attempts to access a port on your computer, BlackIce traces and identifies the intruder's domain name. But BlackIce is no picnic to use, so to get the most out of it, you'll need to know a bit about Internet security programs. What's more, BlackIce lacks some basic features that its competitors offer: it doesn't prevent programs on your PC from connecting to the Web, nor does it scan email for potentially harmful macros or VBS files. Unless you really need to know who's trying to access your computer, try ZoneAlarm. It's easy to configure, it provides thorough security, and it's free.
Painless installation
Whether you purchase a BlackIce Defender CD or download it directly from Network Ice, the program is a breeze to install. There's nothing to configure during installation. You just let the program run, and once the installation is completes, BlackIce sits in the system tray, ready to go. You don't even need to reboot your PC--how's that for convenience?
Plain-Jane interface
To open the BlackIce control panel, double-click the icon in the system tray. The control panel itself is visually uninspiring but organizes each function into easy-reference tabs: Attacks (which displays a list of attacks and their relative priorities), Intruders (which identifies prospective attackers by name and IP address), History (which keeps a record of past attacks), and Information (which lets you decide how to handle attacks and reports). The main menu also allows you to optimise, or filter, the reports by type (for example, so that you see only pings to your PC as opposed to port scans), edit BlackIce settings (such as security level), and download program updates from the Web.
Lots of features, lots of clutter
To configure BlackIce Defender's security levels, you'll need to access the Settings dialog box under the Tools menu. From the Protections tab, you can set BlackIce's security level. The default Cautious (low) security setting blocks only some inbound traffic. The Trusting setting allows all inbound traffic. If you're the twitchy type, you can select higher levels of security that will block most (Nervous) or all (Paranoid) unauthorised incoming connections. The Detection tab lets you set which addresses and conditions BlackIce allows or ignores. The two Log tabs let you enable and set up the logging features to record and classify each intrusion event, such as a multicast or a ping. From the Back Trace tab, you can set BlackIce to find and record the source of the intrusion--a feature that really sets BlackIce apart from its competitors. However, you won't use Back Trace unless you're trying to hunt down and prosecute intruders. That's why only network administrators and security pros who can take steps against intruders need this app. Unfortunately, all of these settings and tabs also make BlackIce's interface a tad confusing.
BlackIce lacks two important features that most of its competitors provide. First, there's no way to block outgoing applications from using the Internet; for example, you cannot opt to prevent an FTP client, such as FTP Voyager, from accessing the Internet, while allowing another program, for example, Internet Explorer, to make connections. Second, BlackIce lacks a feature that scans email messages for suspicious attachments, such as macros or VBS files. ZoneAlarm is the only firewall that scans email.
Abundant support
If you're having difficulty with BlackIce's myriad settings, help is readily available. From the Information tab, you can access comprehensive help files that give you one-click access to specific BlackIce topics, online support, and the Network Ice Support Knowledge Base. For interactive help, head over to the Network Ice Web site anytime and check out its searchable knowledge base, online documentation, FAQs, and message board. There's also an advice area that covers a range of security topics and alerts. For specific questions, there's no free phone support, but you can get email support, and free updates are available for one year (they require your license key). The company's responses to our email inquiries were terse but prompt. Performance-wise, BlackIce was more than a match for its competitors. For our unofficial tests, we used Port Detective to try to access a series of common ports on the test computer. At high security (called Paranoid), BlackIce successfully blocked ports 21, 23, 25, 80, 137, 138, 139, 143, and 443. The Paranoid security setting bars all inbound traffic and blocks all ports so that Internet access is impossible. When we changed the settings to Cautious (low) and Nervous (medium) security, the program blocked all but port 80.
In our labs' official tests, BlackIce managed to close all of the ports on our test computer. However, whereas the other products we reviewed also stealthed, or hid, the ports from hackers, BlackIce left one port visible.
Only pros need apply
Although BlackIce offers options and features similar to other firewalls in this class, it's missing a few key features, including the ability to block suspicious email. Of all the programs we reviewed, only BlackIce lets you identify anyone who tries to access your PC. However, it may overwhelm average Web surfers. Unless you're a network administrator, you'll get better value from a straightforward, free tool such as ZoneAlarm.
The good: Collects comprehensive data about intruders.
The bad: Can't block outgoing data or suspicious incoming email; no telephone support.
The bottom line: Because BlackIce lets you collect copious data on potential intruders, we think it's best for the high-end and SOHO markets, but for a simpler and more effective solution, look to ZoneAlarm.
BlackIce Defender
Price:US$39.95 plus US$40.05 International Delevery, Subscription 1yr Additional US$19.95
Company:Macmillansoftware
Purchase Online:BlackIce defender
|
||
 |
|
 |
|
||
|
||
|
||
| • | ZDNet recommends | • | ZoneAlarm 2.6 |
| • | Norton Personal Firewall 2002 | • | McAfee Firewall 3.0 |
| • | BlackIce Defender 2.5 | • | Tiny Personal Firewall 2.0.14 |
| • | Feature comparison | • | ZDNet Labs tests personal firewalls |
10%
8%
