Sygate Firewall (part 2)

Didn't want to restart an 'old thread'
(http://www.vistax64.com/vista-genera...-firewall.html), so I
thought I'd start a new one.

I've been using XP for ages. Vista never really cut it for me in an
enterprise environment, but now with SP2 and some decent RSAT tools,
it's time for me to start getting comfortable with it.

I must say I'm pretty impressed, it certainly takes up much more
resources, and I really do miss a lot of the good 'ol Windows XP Power
Toys (as well as some of the admin tools for 2003/2000/XP), but it's
just as stable and, for the most part, just as quick-once it's up and
running. I digress.

The one tool I've always used and find myself not being able to live
without is Sygate Personal Firewall (please, please please save me the
lectures of software firewalls not being adequate [I know, this is
hardly my only line of defence] and Windows Firewall is just as good [it
isn't]). Anyway, it's obviously not going to work with Vista with the
somewhat rewritten IPv4 stack, and I'm sure it doesn't appreciate IPv6
being thrown into the mix as well (I should mention here that I'm not
using IPv6). What alternatives are people using? The things I liked
about Sygate:

- Being able to inspect packets individually
- Being able to set not just source/destination IP/port/MAC settings,
but each of those settings on a per application basis
- Notification of when an application requesting network access has
been updated
- Notification of any application requesting network access (and, by
default, denying it)

The latter two points are the most important, and any firewall I'd like
to use will have these features. So, what do you guys use? What is
absolutely not worth looking into? Also, if I'm being particularly
greedy in my firewall of choice, it would even be able to write its logs
to the Applications and Service logs.

Thank you all for your time in advance, hello, and thank you!


--
KPOM

On Wed, 3 Jun 2009 13:22:34 -0500, KPOM wrote:

> Didn't want to restart an 'old thread'
> (http://www.vistax64.com/vista-genera...-firewall.html), so I
> thought I'd start a new one.
>
> I've been using XP for ages. Vista never really cut it for me in an
> enterprise environment, but now with SP2 and some decent RSAT tools,
> it's time for me to start getting comfortable with it.
>
> I must say I'm pretty impressed, it certainly takes up much more
> resources, and I really do miss a lot of the good 'ol Windows XP Power
> Toys (as well as some of the admin tools for 2003/2000/XP), but it's
> just as stable and, for the most part, just as quick-once it's up and
> running. I digress.
>
> The one tool I've always used and find myself not being able to live
> without is Sygate Personal Firewall (please, please please save me the
> lectures of software firewalls not being adequate [I know, this is
> hardly my only line of defence] and Windows Firewall is just as good [it
> isn't]). Anyway, it's obviously not going to work with Vista with the
> somewhat rewritten IPv4 stack, and I'm sure it doesn't appreciate IPv6
> being thrown into the mix as well (I should mention here that I'm not
> using IPv6). What alternatives are people using? The things I liked
> about Sygate:
>
> - Being able to inspect packets individually
> - Being able to set not just source/destination IP/port/MAC settings,
> but each of those settings on a per application basis
> - Notification of when an application requesting network access has
> been updated
> - Notification of any application requesting network access (and, by
> default, denying it)
>
> The latter two points are the most important, and any firewall I'd like
> to use will have these features. So, what do you guys use? What is
> absolutely not worth looking into? Also, if I'm being particularly
> greedy in my firewall of choice, it would even be able to write its logs
> to the Applications and Service logs.
>
> Thank you all for your time in advance, hello, and thank you!

Managing the Windows Vista Firewall *(read twice!)*
http://technet.microsoft.com/en-us/m.../cc510323.aspx

PFW Criticism.
http://en.wikipedia.org/wiki/Persona...all#Criticisms

Jesper's Blogs-
At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesp...l-is-free.aspx
Windows Firewall: the best new security feature in Vista?
http://blogs.technet.com/jesper_joha...01/426921.aspx

Exploring The Windows Firewall.
http://www.microsoft.com/technet/tec...l/default.aspx
"If you try to block outbound connections from a computer that’s already
compromised, how can you be sure that the computer is really doing what you
ask? The answer: you can’t. Outbound protection is security theater—it’s a
gimmick that only gives the impression of improving your security without
doing anything that actually does improve your security. This is why
outbound protection didn’t exist in the Windows XP firewall and why it
doesn’t exist in the Windows Vista™ firewall."

Tap into the Vista firewall's advanced configuration features
http://articles.techrepublic.com.com...7-6098592.html
"...once you discover the secret of accessing its advanced configuration
settings via the MMC snap-in, you'll find it to be far more configurable
and functional. At last, Windows comes with a sophisticated personal
firewall that can be used to set up outbound rules as well as inbound, with
the ability to customize rules to fit your precise needs."
Or
Configure Vista Firewall to support outbound packet filtering
http://searchwindowssecurity.techtar...247138,00.html
Or
Vista Firewall Control (Free versions available).
Protects your applications from undesirable network incoming and outgoing
activity, controls applications internet access.
http://sphinx-soft.com/Vista/
The free version may be all you need, check the comparisons under
the "Download and Buy" link.

http://www.microsoft.com/technet/com...uy/cg0905.mspx
http://www.microsoft.com/whdc/device/network/WFP.mspx

Easy guide to make Windows Firewall better in Windows Vista.
http://www.expertvista.com/2009/01/0...dows-firewall/

SolutionBase: Take a look at the Windows Vista Firewall
http://articles.techrepublic.com.com...tag=rbxccnbtr1

On 03 Jun 2009, KPOM <> wrote in
microsoft.public.windows.vista.general:

> The one tool I've always used and find myself not being able to
> live without is Sygate Personal Firewall (please, please please
> save me the lectures of software firewalls not being adequate [I
> know, this is hardly my only line of defence]

I see your one responder couldn't resist the urge to proselytize.

I like Sygate Personal Firewall, too, and I find it very useful on my
XP box. I will be sorry to have to give it up someday.

On 6 Jun 2009 19:48:13 GMT, Nil wrote:

> On 03 Jun 2009, KPOM <> wrote in
> microsoft.public.windows.vista.general:
>
>> The one tool I've always used and find myself not being able to
>> live without is Sygate Personal Firewall (please, please please
>> save me the lectures of software firewalls not being adequate [I
>> know, this is hardly my only line of defence]
>
> I see your one responder couldn't resist the urge to proselytize.

How did you arrive to this conclusion?

> I like Sygate Personal Firewall, too,

And what has preference of a software program to do with Internet Security?

> and I find it very useful on my XP box.

Elaborate on the usefulness of this particular application.

> I will be sorry to have to give it up someday.

A bit of education should alleviate this.

Good luck

On 06 Jun 2009, Kayman <kayhkay-nospam-@operamail.com> wrote in
microsoft.public.windows.vista.general:

> How did you arrive to this conclusion?

I read your response.

> And what has preference of a software program to do with Internet
> Security?

Take a guess.

> Elaborate on the usefulness of this particular application.

I'm not in the mood to argue with a religious fanatic.

> A bit of education should alleviate this.

A bit of "stick-it-up-your-ass" will be even more effective.

On 7 Jun 2009 04:52:05 GMT, Nil wrote:

> On 06 Jun 2009, Kayman <kayhkay-nospam-@operamail.com> wrote in
> microsoft.public.windows.vista.general:
>
>> How did you arrive to this conclusion?
>
> I read your response.
>
But you didn't comprehend the content.
>> And what has preference of a software program to do with Internet
>> Security?
>
> Take a guess.
>
Well, you don't know anything about Internet Security.
>> Elaborate on the usefulness of this particular application.
>
> I'm not in the mood to argue with a religious fanatic.
>
Who's arguing?
>> A bit of education should alleviate this.
>
> A bit of "stick-it-up-your-ass" will be even more effective.
>
Ah, now you're trying to sound effectively 'intelligent'.