PDA

View Full Version : Resource hog v. too leaky


keysurfer
July 26th, 2003, 05:36 AM
I've used ZAPro for over 2 years (now on v.4???) and have just moved to Kerio 2.1.5 due to my annoyances with ZAPro being resource hungry.

It's a drastic improvement re. resources but now I find
http://perso.wanadoo.fr/jugesoftware/firewallleaktester/eng/pageweb/test.html
where Outpost and Look'n'Stop are the most leak proof.

How do they compare in the resource hog stakes to ZAPro and Kerio please?

BlitzenZeus
July 26th, 2003, 08:37 AM
Kerio is not designed to protect you from your own stupid mistakes, and problems others build into their sofware. Kerio is a packet filter which allows you to conform rules to basic application filtering. If an applcation uses another application like IE to proxy itself, then it will be seen as IE.

I run Kerio, and I have not had any problems with virii, trojans, etc... I also don't download illegal, or pirated material either unlike many people who need this stuff to protect their computers from their own stupid mistakes.

If you need something to protect you from yourself you will want to look at others that offer some sandboxing capabilities in some form. Just because a vendor blocks one leaktest, doesn't mean its not vulnerable to another as they try to shortcuts many ways to blocking them without any real monitoring/prevention.

Its best not to let them on your system at all, and like I said before, this hasn't been a problem here.

keysurfer
July 26th, 2003, 08:54 AM
BlitzenZeus,

Wow... you got shares in Kerio or somthing????

Well thx for the vote of confidence in assuming I'm making stupd mistakes. :o

I have never had a trojan detected before (running BOClean), and have sufficient AV protection.

I also, {QUOTE-> also don't download illegal, or pirated material <-QUOTE} :P

{QUOTE-> If you need something to protect you from yourself <-QUOTE} ??? Where did this come from? Surely I could be affected quite innocently by files masquerading as something other than themselves?

I'm just trying to afford as much protection as possible.

I didn't ask for a perfect product that is leak proof, I asked for a comparison leak-proofness v. resource consuming.

However after your warm welcome, I wished I hadn't bothered!!!!!

Thx for being so constructive - NOT!

All due respect,
Keysurfer

Phant0m
July 26th, 2003, 09:16 AM
Hey keysurfer

In-spite of a particular user post I see nothing wrong asking what you had.

If you Visit http://www.wilderssecurity.com/showthread.php?t=11757 you may find answers to some questions you might have…

BlitzenZeus
July 26th, 2003, 09:22 AM
I'm sorry if you took offense to that, but your trying to compare two products which are quite different even though they both filter traffic.

ZA Pro has some privacy options, and even some light sandboxing for targeted exploits I have heard. Along with its simple application allow/block filtering, with the option of 'expert rules'.

Kerio is just a pure packet filters with basic application filtering, and it does check to see if a program has been altered with MD5 checking for some security.

What you get in ZA with the resources is their huge GUI to help novices, and their other options. While you may not be able to make a configuration in the firewall as complex as Kerio, the other features are also what people are looking for. Consider people run 3-6 programs for security, and if you have all that in one program then it should take up less memory compared to running all the other programs. Also the obvoius answer that ZA Pro costs money...

Kerio is closer to what a true firewall is, its basic, and gets the job done. However exploits in software not connected to Kerio are seen as problems with Kerio. One thing about Kerio is its very hard to configure compared to ZA as its pure rule based, but does allow for more complex configurations.

As far as resources go, Kerio is quite lite but doesn't have those extra features that ZA Pro has.

keysurfer
July 26th, 2003, 09:26 AM
Thanks Phantom,

Quite informative, I think I'll give L'n'S a test.

Regards,
Keysurfer

Phant0m
July 26th, 2003, 09:31 AM
:D

keysurfer
July 26th, 2003, 09:36 AM
No problem BlitzenZeus,

I can see now it's just a misunderstanding.

I wasn't looking for a comparison between ZAPro and Kerio.

I understand the core difference between kerio and ZAPro.

Having found the test results and the likes of Outpost and L'n'S I just wanted to know if they were as resource hungry as ZAPro or lean like Kerio.


Regards,
Keysurfer

casper99
July 27th, 2003, 12:19 PM
Give Outpost a try, I like it a lot. Had used ZA too, but like Outpost way better. Outpost V1 has worked great and uses less resources than ZA.

fryr
July 28th, 2003, 06:03 PM
I have reviewed Norton NIS and Sygate Firewall - both were resource hungry - Now using LooknStop - great on resources both CPU and RAM