Keeping the outside out: Seven desktop firewalls tested

By
01 November 2002 03:00 PM
Tags: check point secureclient, cracker, firewall, virus, worm, security, hacker, zone alarm pro

Computer Associates eTrust EZ Firewall

The EZ Firewall installs quickly from the downloaded version and comes up with its default protection after a reboot. The default policy allows selected incoming traffic and all outgoing traffic, which we feel is a little too relaxed. If there are any attempted connections, a popup window reports details of host, protocol, and service, and gives the option to permit or deny the traffic. In the default learning mode, this information will be remembered and the same rule applied to further connections. There is also a default to auto deny in 30 seconds, although the window never changes to reflect this—and simply stays on the screen. This is a little confusing, as you are not sure whether the traffic arrived recently and is still waiting for an answer or not.

Firewalls: Introduction
Check Point SecureClient
Computer Associates eTrust EZ Firewall
ISS RealSecure Desktop Protector
Kerio Personal Firewall
McAfee Desktop Firewall 7.5
Symantec Client Security 8.0
Zone Alarm Pro
Sample scenario
How we tested
Glossary
Specifications and results
Editors' Choice
About RMIT Test Labs

The initial configuration screen looks a little confusing; there is no real information about what a lot of the icons do. There are traffic lights for incoming and outgoing traffic, with each having the option to deny all (red), allow selected (yellow), or allow all (green). Clicking again on any of the options allows you to view the firewall rules that apply in this case. There are four icons along the bottom of the screen for daily information, help, close, and about. There does not seem to be any information beyond one day kept at all in the logs.

The port scan produced some unusual results, with all ports below 1024 filtered, but a variety of ports above 1024 open. The test was able to fingerprint the OS correctly. There was no reaction to the ping flood at all, and CPU utilisation was quite high while the flood continued. There were no problems connecting to the Windows share, opening Web pages, or reading e-mail.

There is an option to save all the created firewall rules into a single file and import them to another system, which is handy if you need to set up many systems, but this is the only concession to external management in this product. EZ Firewall has a pair of sister applications; EZ Antivirus and EZ DeskShield, that provide antivirus and desktop e-mail protection respectively, and in fact there is a package called EZ Armor that rolls all three into a single install.

Overall this system is easy to install, but the lack of configuration, logging, and management options mean it is much better suited to the individual/home user than corporate environment. There are other, larger Computer Associates systems that are more relevant, but we were unable to access them in time for the review.

Product: Computer Associates eTrust EZ Firewall

Price: US$29.95 per user, annual renewals US$14.95 per user

Vendor: Computer Associates

Phone: 03 9821 3000

Web: www.ca.com

Interoperability: ½
Limited management features.

Futureproofing: ½
Good, but lacks configuration options and in-depth logging.

ROI:
Good value for money.

Service:
Good online help and FAQs.

Rating: ½

Talkback 2 comments

    central silent installs?? was ...Anonymous -- 20/05/04

    central silent installs?? was in ice cap but to my knowledge not yet wriitten into SP!!

    You did not review the new eTr ...Anonymous -- 03/11/04

    You did not review the new eTrust EZ Armor. It is different now; it consists of eTrust EZ Antivirus and eTrust EZ Firewall (which is ZoneLabs technology). So you have a good antivirus, not a resource hog, uses less space on hard drive, and "ZoneAlarm." There are not many better.

Add your opinion

Reviews by category

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

Tags

Back to top

Featured