How we tested
The software was installed on a typical system, an Excel 2700C Notebook with a 1GHz Pentium III processor, 256MB of RAM, running Windows 2000 SP2.
We conducted two tests to assess the software's ability to prevent attacks from outside:
1. The system was port scanned using nmap v3.00 with fingerprinting. This reveals if any TCP or UDP ports are visible to the outside world, which may then be attacked.
We then ran a series of basic client functions:
• Connect to a Windows share
• Browse some Web pages
• Read e-mail with a dedicated client
These tests determine the firewall's ability to detect and block software on the tested PC connecting to the outside. This is to prevent Trojans or other malicious code from sending data on the PC to the outside world, or from using the PC as a launch-pad to attack others systems.
Interoperability was based on the clients that the systems would run on and some of the management features available.
Futureproofing was based on the user friendliness and configurability of the systems, as well as their potential to be managed in a large environment.
Return on Investment was based on features of the software balanced against the cost (both software and deployment).
Service was based on documentation and support available.
3%
5%
central silent installs?? was in ice cap but to my knowledge not yet wriitten into SP!!