Keeping the outside out: Seven desktop firewalls tested

Computer Associates eTrust EZ Firewall

The EZ Firewall installs quickly from the downloaded version and comes up with its default protection after a reboot. The default policy allows selected incoming traffic and all outgoing traffic, which we feel is a little too relaxed. If there are any attempted connections, a popup window reports details of host, protocol, and service, and gives the option to permit or deny the traffic. In the default learning mode, this information will be remembered and the same rule applied to further connections. There is also a default to auto deny in 30 seconds, although the window never changes to reflect this—and simply stays on the screen. This is a little confusing, as you are not sure whether the traffic arrived recently and is still waiting for an answer or not.

Firewalls: Introduction
Check Point SecureClient
Computer Associates eTrust EZ Firewall
ISS RealSecure Desktop Protector
Kerio Personal Firewall
McAfee Desktop Firewall 7.5
Symantec Client Security 8.0
Zone Alarm Pro
Sample scenario
How we tested
Glossary
Specifications and results
Editors' Choice
About RMIT Test Labs

The initial configuration screen looks a little confusing; there is no real information about what a lot of the icons do. There are traffic lights for incoming and outgoing traffic, with each having the option to deny all (red), allow selected (yellow), or allow all (green). Clicking again on any of the options allows you to view the firewall rules that apply in this case. There are four icons along the bottom of the screen for daily information, help, close, and about. There does not seem to be any information beyond one day kept at all in the logs.

The port scan produced some unusual results, with all ports below 1024 filtered, but a variety of ports above 1024 open. The test was able to fingerprint the OS correctly. There was no reaction to the ping flood at all, and CPU utilisation was quite high while the flood continued. There were no problems connecting to the Windows share, opening Web pages, or reading e-mail.

There is an option to save all the created firewall rules into a single file and import them to another system, which is handy if you need to set up many systems, but this is the only concession to external management in this product. EZ Firewall has a pair of sister applications; EZ Antivirus and EZ DeskShield, that provide antivirus and desktop e-mail protection respectively, and in fact there is a package called EZ Armor that rolls all three into a single install.

Overall this system is easy to install, but the lack of configuration, logging, and management options mean it is much better suited to the individual/home user than corporate environment. There are other, larger Computer Associates systems that are more relevant, but we were unable to access them in time for the review.

Product: Computer Associates eTrust EZ Firewall

Price: US$29.95 per user, annual renewals US$14.95 per user

Vendor: Computer Associates

Phone: 03 9821 3000

Web: www.ca.com

Interoperability: ½
Limited management features.

Futureproofing: ½
Good, but lacks configuration options and in-depth logging.

ROI:
Good value for money.

Service:
Good online help and FAQs.

Rating: ½

Advertisement

Talkback 2 comments

    central silent installs?? was in ice cap but to my knowledge not yet wriitten into SP!!Anonymous -- 20/05/04

    central silent installs?? was in ice cap but to my knowledge not yet wriitten into SP!!

    You did not review the new eTrust EZ Armor. It is different now; it consists of eTrust EZ Antivirus and eTrust EZ Firewall (which is ZoneLabs technology). So you have a good antivirus, not a resource hog, uses less space on hard drive, and "ZoneAlarmAnonymous -- 03/11/04

    You did not review the new eTrust EZ Armor. It is different now; it consists of eTrust EZ Antivirus and eTrust EZ Firewall (which is ZoneLabs technology). So you have a good antivirus, not a resource hog, uses less space on hard drive, and "ZoneAlarm." There are not many better.

Add your opinion


Reviews by category

Latest Videos

Blogs

  • Chris Duckett PayPal launches Aussie developer program
    PayPal announced the opening of its certification program for Australian developers today, making Australia the first country outside of the US to offer certification.
  • Array Cash cow in a BigTinCan?
    Around one third of Australia's telcos have shut their doors over time, but that isn't stopping new ventures hoping to chip away at carriers' mobile call bonanza. By fighting carriers at the smartphone rather than the home phone, could the latest two contenders be onto something big?
  • Array A third of the way to a zettabyte
    This week on Twisted Wire we look at how internet usage is changing in Australia and around the world. How are we meeting this demand and how is the cost structure changing for the service provider?
  • More blogs »

Tags

Back to top

Featured