RE: ip filters and blackice

From: Peter Johnson (pjohnson@techskills.com)
Date: 11/29/01


From: "Peter Johnson" <pjohnson@techskills.com>
To: <focus-ms@securityfocus.com>
Subject: RE: ip filters and blackice
Date: Wed, 28 Nov 2001 18:01:33 -0600
Message-ID: <000001c17869$065816a0$fd02a8c0@peterj>

Preach it, brother. Why doesn't MS just buy ZA and get it over with?
;-) Are ZA or TinySoft 'industrial' enough to pull it off on a server
pushing 3-4Mb/sec?

-Peter

-----Original Message-----
From: Keith.Morgan [mailto:Keith.Morgan@Terradon.com]
Sent: Wednesday, November 28, 2001 4:36 PM
To: 'focus-ms@securityfocus.com'
Subject: RE: ip filters and blackice

Yes, it's real ip filtering. It's great. The problem is the interface
is
horrible.
If they had a slightly *cough* more intuitive interface, it's likely
more
people would use it instead of resorting to low-cost host-based
firewalls
such as BI or ZA.

> -----Original Message-----
> From: John Morello [mailto:jmorello@microsoft.com]
> Sent: Wednesday, November 28, 2001 5:01 PM
> To: Chris Murley; javier wilson
> Cc: focus-ms@securityfocus.com
> Subject: RE: ip filters and blackice
>
>
> You want real IP filtering? Check out Steve Riley's article on IPSec:
>
> Using IPSec to Lock Down a Server
> http://www.microsoft.com/serviceproviders/columns/using_ipsec.asp
>
> -----Original Message-----
> From: Chris Murley [mailto:murley@townnews.com]
> Sent: Wednesday, November 28, 2001 2:28 PM
> To: javier wilson
> Cc: focus-ms@securityfocus.com
> Subject: Re: ip filters and blackice
>
> win2k's ip filtering is terrible. I would recommend zonealarm.
>
> Thoughs it's not free, it's cheap, and gives you full control of your
> firewall.
>
>
> The new version of black ice probally has some ip filtering
> capablities
> built in, check with them to verify.
>
> Regards,
>
> -Chris
>
> _________________________________________________________________
> Christopher Murley PHONE: 309.743.0800
> Senior Systems Administrator TOLL FREE: 800.293.9576
> INN TownNews \ Lee Enterprises FAX: 309.743.0830
> 1521 47th Avenue E-Mail: murley@townnews.com
> Moline, Illinois 61265 Web: http://www.townnews.com
> _________________________________________________________________
>
> On Wed, 28 Nov 2001, javier wilson wrote:
>
> > I use w2k remote access policies to set ip filters for
> > my RAS clients. Since I installed the new version of BlackIce
> > defender (2.9cai) my ip filters no longer work. They would
> > only work if I stop the blackice service and will not work
> > once I start the service again.
> >
> > I need both BlackIce for intrusion detection and ip filters
> > to restrict ras clients according to the options that the
> > remote access policies has.
> >
> > Any of you has had a similar problem, or know if this is
> > a known problem/issue of blackice?
> >
> > javier wilson
> >
>



Relevant Pages

  • RE: ip filters and blackice
    ... Subject: ip filters and blackice ... If they had a slightly *cough* more intuitive interface, ... > To: Chris Murley; javier wilson ...
    (Focus-Microsoft)
  • RE: ip filters and blackice
    ... Subject: ip filters and blackice ... Actually I would recommend using Tiny Software's Personal Firewall. ... I think it much better than Black Ice and Zone Alarm (which I ...
    (Focus-Microsoft)
  • Re: ip filters and blackice
    ... Subject: ip filters and blackice ... Since I installed the new version of BlackIce ... > only work if I stop the blackice service and will not work ... > to restrict ras clients according to the options that the ...
    (Focus-Microsoft)
  • RE: ip filters and blackice
    ... Subject: ip filters and blackice ... Pay attention to the four security level matrix that tells what ... only work if I stop the blackice service and will not work ...
    (Focus-IDS)
  • Re: ip filters and blackice
    ... Subject: ip filters and blackice ... >my RAS clients. ... >remote access policies has. ...
    (Focus-IDS)