Re: BlackIce Vs ZoneAlarm

• Previous message: RoboZ: "Re: Browser privacy and ZoneAlarm"
• In reply to: Ken Endeley: "BlackIce Vs ZoneAlarm"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

From: paul.adams@thecheshire.WANTSNOSPAM.co.uk
Date: Tue, 15 Jan 2002 09:33:50 GMT

On Mon, 14 Jan 2002 09:37:33 -0500, "Ken Endeley"
<kenendeley@lycos.com> wrote:

>At my firm, we are currently evaluating zonealarm and Blackice for
>installation on all our laptops. Has anyone used the two products before and
>which one should I go for in a WAN/LAN/VPN environment.

Depends what you want to achieve.

We started out with about 5 laptops for Tech Support users, and so we
were happy using BlackICE (coupled with McAfee AV) as we could control
which remote IPs could talk to the box and the alerting/reporting is
good.

We then got a requirement to have a dozen or so "normal" users who
would be accessing our network remotely, and given their habit of
installing software, running executable email attachments, etc. we
needed a little more application & outbound security.

So we installed Zone Alarm Pro on all the laptops, configured them for
just the apps they need and put a password on so they can't add their
own programs.

As has been pointed out numerous times, BlackICE is chiefly an IDS
which can filter inbound connections (based on IP and/or port) and ban
remote IPs from connecting to your machine, whereas Zone Alarm is an
inbound/outbound application filter which monitors the PROGRAMS which
are allowed to make/receive connections (not HOW they connect).

If you have one department responsible for installing & configuring
software on laptops, then Zone Alarm Pro will work fine.

Neither system is perfect, it just depends what you want to achieve,
how much admin overhead you want and how often your laptop
configurations alter.

• Next message: Jason Formby: "Re: beginner has firewall questions"
• Previous message: RoboZ: "Re: Browser privacy and ZoneAlarm"
• In reply to: Ken Endeley: "BlackIce Vs ZoneAlarm"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]