Re: Kerio PFW 2.14 - Safe?

From: Kerodo (kerodonospamkenny_at_hotmail.com)
Date: 09/10/04

  • Next message: Rolleston: "Re: ZoneAlarm - Windows Update Site Access Blocked" 
    Date: Fri, 10 Sep 2004 13:29:59 -0700

    In article <1e47gkdzju13x$@x02x67invalid.net>,
    synesthesia@ix02x67invalid.net says...

    >
    > I learned a long time ago to not assume too much. ;) But if I were the
    > assuming type I'd have to say that my gut feeling about the "design
    > philosophy" of modern versions of ZA lean towards a pretty, but dumbed
    > down user interface. If I had to assume, I'd conclude ZA simply doesn't
    > tell you about everything as a matter of "not alarming the unwashed
    > masses" or whatever. Again, that's just my opinion/assumption/whatever.

    Yes, you're probably right. That's pretty scary though, to think that
    ZA isn't really showing you everything in the logs. Of course there is
    some stuff I probably don't care to see, but something like outbound
    type 3 ought to be shown. But knowing ZA, I think perhaps you are
    right.

    >
    > Don't take this the wrong way, but I'd say my above assumption would
    > have a little more basis in fact than an assumption that contradicted a
    > software's literal statements. If Kerio 'X' says it's stateful it most
    > likely is, and any observed behavior that appears to contradict this
    > would likely be a product of rules, or reporting philosophy. The only
    > way to know for sure would be to stand between the firewall and the
    > outside world and observe the actual traffic itself. There's simply too
    > many "what if's" for anything else to be more than speculation.

    It does seem convincing if Kerio actually says it's stateful.

    I myself am currently running Kerio 2.1.5, stateful or not, simply
    because I like it best and feel most comfortable with the interface and
    the rules. It's my favorite firewall.

    The fact that it's an aging firewall that is no longer being updated
    doesn't bother me at all. It works well as is. And I'd much rather see
    it stay as is than add a bunch of useless extra stuff like ZA and others
    do all the time with their updates.

    If it gets the job done and you feel comfortable with it, then that's
    all you need. 

    -- 
Kerodo
  • Next message: Rolleston: "Re: ZoneAlarm - Windows Update Site Access Blocked"

    Relevant Pages

    • Re: Kerio PFW 2.14 - Safe?
      ... If Kerio 2.14/5 states it's stateful, ... inspection is a type of inspection... ... the rules set the firewall applies. ...
      (comp.security.firewalls)
    • Re: Kerio PFW 2.14 - Safe?
      ... > If Kerio 2.14/5 states it's stateful, ... > Stateful inspection is also completely useless without, ... the rules set the firewall applies. ...
      (comp.security.firewalls)
    • Quantcast