Best firewall?

[Sunnysdsr]

What's the best/most secure firewall in the market right now? and why?

[WSFuser]

if u need protection against leaktests then id consider jetico, KIS, ZA, or outpost firewall.

each of mentioned firewalls are rule-based (except ZA) and they all have features that are effective against leaktests.

and lastly, i suggest u visit this site: Firewall Leak Tester (http://www.firewallleaktester.com/), browse these forums for (past) advice, and consider trying the various firewalls to see which one works best for you.

[YeOldeStonecat]

Are you talking for home grade use? Or overall? If overall...you can get into some very pricey enterprise solutions...with a couple of numbers in front of the comma in the price tag. ;) Unified Threat Management appliances, Microsoft ISA 2004, etc.

[Tommy]

-{ Quote: "Are you talking for home grade use? Or overall? If overall...you can get into some very pricey enterprise solutions...with a couple of numbers in front of the comma in the price tag. ;) Unified Threat Management appliances, Microsoft ISA 2004, etc." }-
:thumb: Phoenix embedded linux-based 1U rackmount unit :thumb:

But i think he is talking about homeuser. So i would say Jetico if he is an advenaced user, or Look n Stop and the last Sygate as well as kerio 2.15 (?)

[SirMalware]

I use KIS 6 on my laptops and main PC, but I have an older PC that had Zone Alarm installed on it forever, but as an experiment, I switched to Jetico and so far, I am impressed and am a new convert.

[octogen]

-{ Quote: "...So i would say Jetico if he is an advenaced user, or Look n Stop and the last Sygate as well as kerio 2.15 (?)" }-

I second this, but would also add Outpost to this list.

Edit: Added statement about Outpost

[cprtech]

The soon-to-be-released Outpost pro, version 4.0 promises to block all current leak tests.

[JRCATES]

-{ Quote: "The soon-to-be-released Outpost pro, version 4.0 promises to block all current leak tests." }-

Supposedly, according to the software vendor and several users of the product, the latest release of the FREE Comodo Personal Firewall blocks all of the current leak tests as well.....

[AJohn]

The upcoming Outpost Personal Firewall (4.0 - http://www.agnitum.com/) will be the best firewall in my opinion.

[Perman]

-{ Quote: "The soon-to-be-released Outpost pro, version 4.0 promises to block all current leak tests." }-
Hi,folks: According to a friend of mine, who is a beta tester for outpost pro 4. The feature of anti leak control will push it into higher level of protection. He would not elaborate it, we just have to wait and see.

[AJohn]

I think Comodo has put a lot of pressure out there ;D

[Tommy]

-{ Quote: "I think Comodo has put a lot of pressure out there ;D" }-
.... and if the 'Internal access' feature of Jetico v2 is working well, there will be more presure to other FW's.

[farmerlee]

I found jetico to be the most secure of the ones i've used, however it was a little annoying to use. The best imo is outpost pro, its user friendly, very secure and doesn't use a lot of system resources.

[Clweb]

Oupost uses a lot of system ressouces. Even if the RAM usage has dropped, it make the PC "sluggish". After deinstalling it, the difference was notable.
I used 3.51 and the latest betas.
It is going to become a security suite. Only the antivirus is missing.
I don't like security suites. >:(

[Jarmo P]

No such thing. Best is what suits you and are familiar. So it is not a black box, but you know how to use it. Win XP firewall is though good for many people, hehe.
Things to consider are CPU usage and memory and not slowing down your system.

I run currently kerio 2.1.5 with processguard free with 11.3 MB memory consumption sum from both of those. More important though is CPU usage. With those I get no percentage shown.

There are people boasting something like Comodo fw from china, with bloat and feeling so good cause they say it blocks all the stupid leaktests. Well, keeps them happy I guess :P

[kdm31091]

Windows Firewall is fine if you don't want any extra frills or functions. No outgoing protection, but then again, for most average users its probably fine.

[TOMxEU]

-{ Quote: "Oupost uses a lot of system ressouces. Even if the RAM usage has dropped, it make the PC "sluggish". After deinstalling it, the difference was notable.
I used 3.51 and the latest betas.
It is going to become a security suite. Only the antivirus is missing.
I don't like security suites. >:(" }-
I used Outpost 3.51 and it took 2-12 MB RAM with logging and AS disabled.
In default setup Outpost takes up to 35 MB and can cause some slow downs.

[djg05]

-{ Quote: "
I run currently kerio 2.1.5 with processguard free with 11.3 MB memory consumption sum from both of those. More important though is CPU usage. With those I get no percentage shown.

There are people boasting something like Comodo fw from china, with bloat and feeling so good cause they say it blocks all the stupid leaktests. Well, keeps them happy I guess :P" }-

I use that set up too and seems to work quietly away. I do like to try out other f/w's and gave the latest Comodo beta a try. They say it passes all leaktests but when I tried the PC Flank one it connected straight away as I could see with a packet filter. As I understand it, it should have stopped completely. Also when it ask if a browser can connect it connects anyway and you can just ignore the pop up. Do not have any confidence in that product at all, and it required an image restore to get rid of it.

[duke1959]

You raise a good point kdm31091. Windows XP Firewall may well be enough protection for someone like myself who surfs safely. I use FireFox with Site Advisor, Antivir PE for Virus protection, and currently use SKPF 4.2.3 for a Firewall. Although I don't notice any slow down with my PC while using it, logging off seems to take longer with SKPF installed. I am wondering if you notice this with your Kerio Firewall, and how do you like using ProcessGuard Free . I know Jarmo P likes it. Thanks everyone and take care.

[QBgreen]

-{ Quote: "You raise a good point kdm31091. Windows XP Firewall may well be enough protection for someone like myself who surfs safely. I use FireFox with Site Advisor, Antivir PE for Virus protection, and currently use SKPF 4.2.3 for a Firewall. Although I don't notice any slow down with my PC while using it, logging off seems to take longer with SKPF installed. I am wondering if you notice this with your Kerio Firewall, and how do you like using ProcessGuard Free . I know Jarmo P likes it. Thanks everyone and take care." }-

It's more likely AntiVir that's causing the longer time that it's taking to log off of your system. It has to close several services before releasing the program, and from my experience it does this slowly. I ran AntiVir with SKPF as well as Outpost Pro. When I replaced AntiVir with NOD32, the time it took to log off decreased quite noticeably. This held true with both SKPF and Outpost.

[q1aqza]

I'm finding the opposite. My system shuts down quicker when running Antivir compared to when I'm running NOD or KAV for that matter. And start up is quicker too.

[duke1959]

I can't remember it taking as long until I installed Antivir a little while ago, and Kerio seems to be the first icon in the system tray upon log on. I like Antivir so it is a small price to pay if that is the culprit. I was thinking of using ZA free 6.1.744 with ProcessGuard Free for a few weeks until new Comodo Firewall release is out and proven to be as stable as last version. Any thoughts on this, considering some of the recent ZA trubles? Oh and thanks q1aqza and QBgreen.

[JRCATES]

-{ Quote: "There are people boasting something like Comodo fw from china, with bloat and feeling so good cause they say it blocks all the stupid leaktests. Well, keeps them happy I guess :P" }-

So, Jarmo.....what's your experience with Comodo been like?

Oh wait, maybe you're not familiar with it. After all, the "Comodo fw from china" comment does kinda seem to indicate that. Actually, the truth is they are headquartered in the United States....and this little excerpt is from their web page:

Some Fast Facts about Comodo:

* Headquarters in Jersey City, USA with global offices in UK, Norway and India
* Exclusive provider of digital security services to top level domain name registrants
* More than 150,000 customers in more than 100 countries, securing 500,000+ businesses and individuals
* 4500 strong global partner network
* Operates one of the world's largest fastest growing Certification Authority infrastructures with the highest standards as evidenced by our KPMG annual audits
* World-renowned Digital Trust Lab Research and Development Center
* Contributing member of the Trusted Computing Group

which can be found on this link: http://www.comodogroup.com/corporate/

;)

[farmerlee]

-{ Quote: "Oupost uses a lot of system ressouces. Even if the RAM usage has dropped, it make the PC "sluggish". After deinstalling it, the difference was notable.
I used 3.51 and the latest betas.
It is going to become a security suite. Only the antivirus is missing.
I don't like security suites. >:(" }-
Really? I didn't know it was becoming a security suite. Will that be version 4? I haven't noticed much of a slow down, what sort of computer did you run yours on?

[Eldar]

-{ Quote: "Really? I didn't know it was becoming a security suite. Will that be version 4? I haven't noticed much of a slow down, what sort of computer did you run yours on?" }-Nor do I and I don't think it will become a security suite, looking at their latest newsletter:

-{ Quote: "Here's a quick reminder of the benefits of the new Outpost 4.0:


Information leak prevention;
Proactive and reactive defense against spyware, keyloggers, Trojans and identity theft ;
Self-protection against deactivation by malware ;
Improved Improvenet and Entertainment mode for even greater usability;
Enhanced flexibility settings for expert users, with the ability to use macro definitions in network access rules.
" }-Also would like to say that it's not running heavy on my system, since I disabled the logging. :)
The above list doesn't appear to me as bloatware, nor a security suite. It does offer more protection, which is fine by me. :thumb:

[Clweb]

-{ Quote: "Really? I didn't know it was becoming a security suite. Will that be version 4? I haven't noticed much of a slow down, what sort of computer did you run yours on?" }-

It will not be officially, but I think a fiewall that does so much beside its firewall job, may be considered as a kind of security suite.

[cprtech]

-{ Quote: "It will not be officially, but I think a fiewall that does so much beside its firewall job, may be considered as a kind of security suite." }-

Outpost uses plug-ins for the following:

Active content filtering, spyware monitoring, ad blocking, attachment quarantining, attack detection, content filtering and caching DNS addresses.

Any or all of the plug-ins can be disabled or even removed, if desired, making it very easy to configure it into a firewall application only. I have been using OP since the 2.1x versions and it is an excellent security utility. The latest version, 3.51, is IMHO the best so far. However, I can hardly wait for version 4.0 :)

[farmerlee]

Yeah i'm looking forward to version 4 as well. O/T i tried out the lavasoft firewall a few days ago and it seems to be a modified version of outpost. Anyone have any idea which version of outpost its based on?

[ISSB]

-{ Quote: "Yeah i'm looking forward to version 4 as well. O/T i tried out the lavasoft firewall a few days ago and it seems to be a modified version of outpost. Anyone have any idea which version of outpost its based on?" }-

I do not know on which version of Outpost Lavasoft firewall is based but I've found only 1 plug-in there: Attack Detection. All other Outpost plug-ins are missing.

However I am jumping from one firewall to another very often as I like testing and playing with different security software. So maybe existing users of Outpost will comment later on.

[q1aqza]

-{ Quote: "

However I am jumping from one firewall to another very often as I like testing and playing with different security software." }-
I think too many of us suffer from this obsession on this forum ;D

[cprtech]

-{ Quote: " Anyone have any idea which version of outpost its based on?" }-

This Lavasoft Firewall vs. Outpost Pro Firewall (http://outpostfirewall.com/forum/showthread.php?t=17815&highlight=lavasoft) may shed some light on the differences. Basically, the Lavasoft fw is a watered-down version of Outpost Pro.

[Tobe404]

-{ Quote: "I used Outpost 3.51 and it took 2-12 MB RAM with logging and AS disabled.
In default setup Outpost takes up to 35 MB and can cause some slow downs." }-

I've experienced the some slowdown (especially at start up) also with Outpost using the default settings. But since I don't need to use the logging or AS features. It's not a problem. Can't wait for Version 4 :).

Just thinking about all this reminds me, I should disable EMON on Nod32, as I don't use Outlook.

[racketeer66]

-{ Quote: "I've experienced the some slowdown (especially at start up) also with Outpost using the default settings. But since I don't need to use the logging or AS features. It's not a problem. Can't wait for Version 4 :).
" }-
I am a Beta-tester of Agnitum Outpost 4.0. Although we're not allowed to get into details, I can assure U that this is high-quality stuff. We just got the latest version (Outpost Firewall Pro ver. 4.0.941.6824 (579) today, and we'll have one week for final testing. Of the features I just mention some here: Anti-leaking protection, self-protection, gaming-mode, MACRO-s (for rule-setting, e.g. DNS-servers).

[xschema]

Dummy question: why all of you hate Security Suites ? :D

I'm looking for the "best" protection set for my notebook, coming from FSecure Client Security which I found quite heavy for my resources. About 70megs with all those modules loaded and a bootup time of more than 2 minutes!

Tried ZAP, but found too slowing down for my internet access.
And conflicting when using torrent or p2p

Found Outpost (3.5) and loved it... [side question: ETA to final 4.0 ?]
But...
Beside the firewall (and the boundary anti-spyware Outpost has), then I needed features I had before with FSCS:
- system startup protection
- browser anti hijacking
- antivirus

Then I tried WinPatrol for the startup protection.

AV ?
KAV 6 was the best choice for me, but everything went slower. Besides, I found some conflicting issues between its system protection and outpost.
Then I changed to NOD32. Much lighter, even requesting more ram than kav, when in idle. But it seems less accurate, IMOH.

At the moment I'm looking for the best firewall to couple with NOD32... Desperately seeking lightness along with effectiveness. Original, isn't it ? ;D
8)

This long history to come back to my original question: wouldn't be much better a single suite, without inside conflicts, with LESS memory and resource used than the amount of all those different tools ?

Thanks everybody

[WSFuser]

for a personal firewall to complement nod32 i use looknstop. runs very light and its good for p2p.

as for suites, ill just refer you to this poll:

Which Do You Think Offers the Better Security, All in one or separate Applications? (http://www.wilderssecurity.com/showthread.php?t=140074)

i personally prefer separate applications because it runs lighter for me, it usually results in less running processes, and because I like having a good antivirus and good firewall and good HIPS. suites may sometimes excel in one area only to do poorly in another.

[Kerodo]

-{ Quote: "Dummy question: why all of you hate Security Suites ? :D

This long history to come back to my original question: wouldn't be much better a single suite, without inside conflicts, with LESS memory and resource used than the amount of all those different tools ?

Thanks everybody" }-
A 'suite' is a nice idea and many find the concept appealing, but most of the suite makers aren't the best at all types of software, i.e. firewalls, av's, anti-spyware, etc etc. Usually with a suite, you get one strong component, say the firewall, or perhaps the av, but the rest of it is usually just so-so. While many of the suites are pretty good, I think most people prefer to hand pick what they consider to be the best components rather than use a suite.

[unhappy_viewer]

-{ Quote: "While many of the suites are pretty good, I think most people prefer to hand pick what they consider to be the best components rather than use a suite." }-
Actually its the other way around. Most people prefer to pick a suite than buy an individual product. Its much cheaper for the consumers. Also many security companies have now realised that they cannot survive (survival to them means having profits) any longer if they don't start producing suites. Only the geekier people amnong us (which I guess is pretty much anyone on Wilders) tend to be the picky ones about software.

[Kerodo]

-{ Quote: " Only the geekier people amnong us (which I guess is pretty much anyone on Wilders) tend to be the picky ones about software." }-

Yep, I was pretty much speaking for us geeks... ;)

[ccsito]

A suite allows the novice user to install "one" set of software and not have to worry about trying to make sure all of the separate items are compatible. That is why people like to buy auto options in standard packages as opposed to trying to add a lot of things after the car is made. The first car that I got did not have A/C installed from the factory and I got it put in later. Suffice to say that it did not operate quite like factory installed A/C. :ouch: A large number of computer users are mostly email, music, games, and other entertainment users and have little knowledge of firewalls, antivirus, and antispyware issues. If you read through many of the help forums, whenever they have a problem with their computer they either trash the system, reload it from a backup, or refer the issue to a tech support person. ;)

[Happy-Dude]

Currently, I use ZA Firewall, which works just fine in my opinion. But, I have seen Comodo and looks even better, but I heard configuration can be a pain. I MIGHT just give it a try, but not anytime soon (sticking with ZA for the time being).

For Windows Firewall, its a great basic firewall (for being free and with the Windows XP OS), but at the same time, its is VERY limited. It might not be able to handle much stronger and stealtier threats. People should make the switch to a good free firewall, like ZA or Comodo, if they want to be more protected against malicious software.

[Coolio10]

Comodo takesdown all!

I wouldnt rely on firewall leak tester til they use latest version of comodo which blocks every test which i tested myself

[ninja_man]

Hello...
Than, can anywone tell me what firewall i shoud use...PLZ
In the moment I use ZA Firewall, but I think that I will remove ZA and install Outpost Firewall...WHO IS BETTER???

TNX IN ADVANCE...

[gm69]

-{ Quote: "What's the best/most secure firewall in the market right now? and why?" }-



I have tried many of those comm. firewalls and all of them cause all kinds of troubles.All of them will slam you with all kinds of pop ups to make you believe they work real hard.One hell of a show.
Got rid of them all,turned on xp2 firewall,have cyberhawk,spywareblaster,crapcleaner,avg free,ad-aware se.
System going a-1 without any interference from those programs.
Fed up hearing about outbound bad guys,just don,t let them in.

Adding a littlle note here---i am far from being a microsoft lover.