Re: Time to ditch Sygate firewall?

From: Kerodo (loopback_at_localhost.com)
Date: 08/23/05


Date: Mon, 22 Aug 2005 19:02:18 -0700

In article <MPG.1d74171221d286ca9896c2@news-server.nyc.rr.com>,
nospam@nospam.com says...
> In article <ajkOe.23988$Hx4.12783@twister.nyroc.rr.com>,
> a.nony.mous@example.invalid says...
> > Margaret Wilson wrote:
> >
> > > Interesting choice in AV software. I chose NOD32 as well! I've
> > > been very pleased with it. Much better than NAV in my opinion. I
> > > did the firewall eval thing quite a while ago, and my choice is
> > > Black ICE. I know some people say it's not a "real" firewall
> > > because it doesn't scan outgoing traffic. Well, if those people
> > > actually read the manual, they'd know there's a switch you can use
> > > in firewall.ini to have it scan outgoing traffic.
> >
> > If you can edit a text file to turn it on, malware can edit the text
> > file to turn it off. (Never used BlackIce for this reason.)
> >
> > > Personally, I prefer to start with a known-clean system and then
> > > simply scan incoming traffic. My network sits behind a NAT
> > > firewall, however, so that provides some additional protection
> > > (again, not against outgoing traffic). Anyway, before I found
> > > BlackICE, my fav was Tiny Firewall, which I believe became Kerio,
> > > which I understand is now no longer being updated IIRC.....
> >
> > Kerio is alive and well. And a very good firewall. Free for home use.
> > Yes, it monitors both inbound and outbound traffic.
> > http://www.kerio.com/kpf_home.html
> >
> >
> I just looked at the Kerio site and at the comparison chart between
> the paid and free version.
>
> http://www.kerio.com/kpf_comparison_version.html
>
> I note that the free version does not offer script blocking along
> with some other things I'm not knowledgeable enough to asses.
>
> I'm running Nod32 for my AV and I have a Linksys NAT router. Win
> XP Pro with MS firewall turned off.
>
> Is script blocking necessary?

I thought script blocking was typically done by your anti-virus
software. Or maybe it was just Norton that had it and not the others?
Don't know for sure.

-- 
Kerodo