Recommended software firewalls (win2k3)

Caradog · 12th October 2005

Hi, can anyone suggest a good, resource sensitive software firewall for a windows 2003 server? Something with good scalability and management (open ports for active/pasv ftp etc).

It's to be installed on a live production web server (I know a hardware firewall would be better but in this server's case I may want to go with a cheaper software option).

I'm currently using IP Filtering (opening TCP ports on a per application bases).

- Ta.

chrisbyrd · 12th October 2005

We have Visnetic installed on a few machines and it seems to work fairly well

euk-damien · 9th November 2005

Just have a look at the top 20 firewalls.

http://www.canadiancontent.net/tech/...ls/top-20.html

You can choose any one of them.

markcastle · 9th November 2005

Quote:

Originally Posted by euk-damien

Just have a look at the top 20 firewalls.

http://www.canadiancontent.net/tech/...ls/top-20.html

You can choose any one of them.

That list reads more like a list of firewalls you'd use at home. I'd certainly not recommend a number of those firewalls on production Win2k3 servers... especially not that Norton nonsense.

Dexxa · 9th November 2005

I use Sygate Personal Firewall on my comp, Not bad does its job

chrisbyrd · 9th November 2005

most of those will probably have the nasty habit of having everything disallowed by default when you start - locking you out of your remote desktop

i still vote for vistetic

Dexxa · 9th November 2005

Theres one firewall i cant stand and thats zone alarm, I set it to allow my network to access the internet as ive got two comps connected and now matter what i tryed it always blocked the second computer accessing it

andyb28 · 9th November 2005

THIS USER HAS BEEN GAGGED BY THE FORUM HOSTS FOR SPAM OR BREAKING THE RULES...
User will be ungaged in around 78 hours from this post.

fusion · 9th November 2005

To be honest - I would agree with that Andy, although Visnetic and such like are good and do a good job.. Windows Firewall does exactly the same really, although people like to slate it and write it off. Its simple effective at providing some ensure hardening of windows. Which in most cases all a normal visnetic or such like install does...

So I would agree with that.

TDMWeb · 9th November 2005

Doesn't the Windows firewall still limit you to one IP? RRAS does a good job; bit tedious to set up but otherwise fine.

Edit: take a look at www.8signs.com too. Seems the best value for software firewalls intended for server use. Never liked the setup hassle personally.

heypresto · 9th November 2005

Visnetic = 8Signs

andyb28 · 9th November 2005

THIS USER HAS BEEN GAGGED BY THE FORUM HOSTS FOR SPAM OR BREAKING THE RULES...
User will be ungaged in around 78 hours from this post.

MattParks · 9th November 2005

Quote:

Originally Posted by Dexxa

Theres one firewall i cant stand and thats zone alarm, I set it to allow my network to access the internet as ive got two comps connected and now matter what i tryed it always blocked the second computer accessing it

Here here.... Zone Alarm is poo.

My advice would be to stay away from any firewall that has a "learning" mode, use a firewall you can only admin via a rulebase list (Sygate with the learning mode turned off for example).

I have seen a server running Winroute running, this looked pretty good (has a realtime packet log which is always useful). Not sure whats happeded to it under Kerio???? Also dont rule out ISA server, its a pain to begin with but can do the job once you get used to it.

A NAT'ing hardware firewall (pix501, Sonicwall TZ150 good examples) is always a top option!

TDMWeb · 9th November 2005

Quote:

Originally Posted by heypresto

Visnetic = 8Signs

Yep, and I believe 8Signs is cheaper.

tema · 10th November 2005

We have been evaluating the Fortinet firewall products for some of our customers. They also do a software client version which has AV, firewall and web-filter features built-in. I've been running a copy on this Windows XP laptop for almost two months and works great. It also works for Win Server 2003.

You can download a 30-day trial version from us here:
(be warned - its an 18.8Mb zipped file!)

http://www.gravityinternet.net/download/FortiClient

If you do decide to give it a go, I recommend that you remove/uninstall any other firewall and AV product from your Windows computer first or they will conflict.

cheers,
Tem.