Keeping the outside out: Seven desktop firewalls tested

By
01 November 2002 03:00 PM
Tags: check point secureclient, cracker, firewall, virus, worm, security, hacker, zone alarm pro

Kerio Personal Firewall

The Kerio Personal Firewall was very simple and quick to install from the downloaded version. The IDS is on by default, so after the system reboots, it asks a couple of questions about allowing traffic through certain ports— this could cause some problems for inexperienced users. The configuration of system is very easy, and based on the “block everything and then let what needs to pass through, pass through” theory, but often the defaults are less than ideal.

Firewalls: Introduction
Check Point SecureClient
Computer Associates eTrust EZ Firewall
ISS RealSecure Desktop Protector
Kerio Personal Firewall
McAfee Desktop Firewall 7.5
Symantec Client Security 8.0
Zone Alarm Pro
Sample scenario
How we tested
Glossary
Specifications and results
Editors' Choice
About RMIT Test Labs

When we port scanned the system, two warnings came up and requested input. We followed the steps to create a rule to stop them. The problem was the rule stopped all pings, not just from the offending system. This is not necessarily too bad, as the host appears invisible, but it is probably going overboard. When we tested with the ICMP flood, the same thing happened.

When we connected to the Windows file share, surfed the Web and started our e-mail client, we received warnings. Once that traffic had been okayed, all transfers were working fine.

Further configuration allowed us to create MD5 application signatures to protect the system from Trojan horses imitating trusted programs. There is also a separate screen that displays which connections are open, and displays clearly what each application is doing at any given moment.

Kerio Personal Firewall can be managed with an encrypted remote management tool, and the system has password protection that keeps users from changing security policy on their own. It can also be run as a service to ensure the computer is protected from start-up.

This product is easy to install and use, but there needs to be a bit of care taken when setting the rules so that huge holes are not opened up. Help and online documentation were both quite good.

Product: Kerio Personal Firewall

Price: US$39 per user, free for home and personal use

Vendor: Kerio

Phone: +1 408 496 4500

Web: www.kerio.com

Interoperability:
Good personal system, no management features.

Futureproofing:
Easy to navigate but some rule defaults can cause trouble.

ROI: ½
Good product for the price.

Service: ½
Good documentation and online help.

Rating: ½

Talkback 2 comments

    central silent installs?? was ...Anonymous -- 20/05/04

    central silent installs?? was in ice cap but to my knowledge not yet wriitten into SP!!

    You did not review the new eTr ...Anonymous -- 03/11/04

    You did not review the new eTrust EZ Armor. It is different now; it consists of eTrust EZ Antivirus and eTrust EZ Firewall (which is ZoneLabs technology). So you have a good antivirus, not a resource hog, uses less space on hard drive, and "ZoneAlarm." There are not many better.

Add your opinion

Reviews by category

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

Tags

Back to top

Featured