Thread: Recommended software firewalls (win2k3)

We have Visnetic installed on a few machines and it seems to work fairly well

Just have a look at the top 20 firewalls.

http://www.canadiancontent.net/tech/...ls/top-20.html

You can choose any one of them.

Originally Posted by euk-damien

Just have a look at the top 20 firewalls.

http://www.canadiancontent.net/tech/...ls/top-20.html

You can choose any one of them.

That list reads more like a list of firewalls you'd use at home. I'd certainly not recommend a number of those firewalls on production Win2k3 servers... especially not that Norton nonsense.

most of those will probably have the nasty habit of having everything disallowed by default when you start - locking you out of your remote desktop

i still vote for vistetic

THIS USER HAS BEEN GAGGED BY THE FORUM HOSTS FOR SPAM OR BREAKING THE RULES...
User will be ungaged in around 78 hours from this post.

With SP1 on 2003, I would have thought the built in firewall would be as good as any other installed one.

To be honest - I would agree with that Andy, although Visnetic and such like are good and do a good job.. Windows Firewall does exactly the same really, although people like to slate it and write it off. Its simple effective at providing some ensure hardening of windows. Which in most cases all a normal visnetic or such like install does...

So I would agree with that.

Doesn't the Windows firewall still limit you to one IP? RRAS does a good job; bit tedious to set up but otherwise fine.

Edit: take a look at www.8signs.com too. Seems the best value for software firewalls intended for server use. Never liked the setup hassle personally.

Visnetic = 8Signs

THIS USER HAS BEEN GAGGED BY THE FORUM HOSTS FOR SPAM OR BREAKING THE RULES...
User will be ungaged in around 78 hours from this post.

Originally Posted by TDMWeb

Doesn't the Windows firewall still limit you to one IP? RRAS does a good job; bit tedious to set up but otherwise fine.

Edit: take a look at www.8signs.com too. Seems the best value for software firewalls intended for server use. Never liked the setup hassle personally.

I have never tried multi ip's in sp1. Would be interested to hear the answer to that.

Agreed with the original 2k3 firewall, it didn't support multi ip addresses.

Originally Posted by Dexxa

Theres one firewall i cant stand and thats zone alarm, I set it to allow my network to access the internet as ive got two comps connected and now matter what i tryed it always blocked the second computer accessing it

Here here.... Zone Alarm is poo.

My advice would be to stay away from any firewall that has a "learning" mode, use a firewall you can only admin via a rulebase list (Sygate with the learning mode turned off for example).

I have seen a server running Winroute running, this looked pretty good (has a realtime packet log which is always useful). Not sure whats happeded to it under Kerio???? Also dont rule out ISA server, its a pain to begin with but can do the job once you get used to it.

A NAT'ing hardware firewall (pix501, Sonicwall TZ150 good examples) is always a top option!

Originally Posted by heypresto

Visnetic = 8Signs

Yep, and I believe 8Signs is cheaper.

We have been evaluating the Fortinet firewall products for some of our customers. They also do a software client version which has AV, firewall and web-filter features built-in. I've been running a copy on this Windows XP laptop for almost two months and works great. It also works for Win Server 2003.

You can download a 30-day trial version from us here:
(be warned - its an 18.8Mb zipped file!)

http://www.gravityinternet.net/download/FortiClient

If you do decide to give it a go, I recommend that you remove/uninstall any other firewall and AV product from your Windows computer first or they will conflict.

cheers,
Tem.