RE: Win32 Firewalls.

From: Price, Robert H (rhpric_at_sandia.gov)
Date: 03/30/05

  • Next message: Steve Fletcher: "RE: Scanning--more then one side to the argument"
    Date: Wed, 30 Mar 2005 13:02:41 -0700
    To: "Jeff Gercken" <JeffG@kizan.com>, "Robert Sherrard" <rob.sherrard@vidiator.com>, security-basics@securityfocus.com
    
    

     We are using Kerio and it also has remote management capabilities.

    Robert Price
    SEEMS Team Member
    Org - 09329
    Respec Inc.
    Facilities Security Officer
    Supporting Sandia National Laboratories
    Work - (505) 284-2600
    Fax - (505) 844-8251
    Cell - (505) 228-4583

    -----Original Message-----
    From: Jeff Gercken [mailto:JeffG@kizan.com]
    Sent: Tuesday, March 29, 2005 12:07 PM
    To: Robert Sherrard; security-basics@securityfocus.com
    Subject: RE: Win32 Firewalls.

    All client side firewalls can be disabled by the client OS. I would
    look at a different solution, really. (think how trivial it is for many
    worms to disable antivirus processes)

    -----Original Message-----
    From: Robert Sherrard [mailto:rob.sherrard@vidiator.com]
    Sent: Tuesday, March 29, 2005 1:27 AM
    To: security-basics@securityfocus.com
    Subject: Win32 Firewalls.

    Does anyone know of a "light-weight" client side firewall for Win32
    boxes... I'm looking to deploy a client firewall in a production
    environment... boxes will have a large number of current sessions, the
    firewall would be need to support stateful inspection, and would be
    centrally managed, via console and or policy based.
     
    Rob

    ---------------------------------------------------------------------------
    Earn your MS in Information Security ONLINE
    Organizations worldwide are in need of highly qualified information security
    professionals. Norwich University is fulfilling this demand with its MS in
    Information Security offered online. Recognized by the NSA as an
    academically excellent program, NU offers you the opportunity to earn your
    degree without disrupting your home or work life.

    http://www.msia.norwich.edu/secfocus_en
    ----------------------------------------------------------------------------


  • Next message: Steve Fletcher: "RE: Scanning--more then one side to the argument"

    Relevant Pages

    • lame server messages in named.log
      ... Mar 30 05:42:30.526 security: info: client 202.52.250.176#1052: ... query (cache) denied ...
      (RedHat)
    • lame server messages in named.log
      ... Mar 30 05:42:30.526 security: info: client 202.52.250.176#1052: ... query (cache) denied ...
      (RedHat)
    • Re: [Full-disclosure] [Professional IT Security Providers -Exposed] PlanNetGroup ( F )
      ... [Professional IT Security Providers -Exposed] ... to do what the client will pay him for. ... exactly a vulnerability assessment is... ... PlanNetGroup yet. ...
      (Full-Disclosure)
    • Re: Security Audit
      ... Subject: Security Audit ... > A zero knowledge pen test ... manner that is useful and pertinent to the client. ...
      (Pen-Test)
    • Re: Defense in Depth
      ... What is meant by "layers" of security, is this: the entry points that must be ... Physical Layer - Physical access to the resources. ... attacks and other attacks that go after the software itself. ... "layer" in one long chain (lots of firewalls). ...
      (Security-Basics)

  • Quantcast