Real firewall without HIPS

A lot of software firewalls these days are just outbound connection control and HIPS, but that's not what I'm looking for. Are there also software firewalls which focus on inbound protection to stop all kinds of network attacks, worms, port scanning etc. and using techniques like IDS and SPI? I know there are consumer routers with SPI, but those are quite basic and corporate firewalls are really expensive. Plus, if you're not at home or wherever you firewall is, your notebook will not be protected so that's another reason for a good software firewall.

 

Sunbelt and Outpost both use IDS. I think ZoneAlarm Pro does as well but don't quote me.

 

I also want a good inbound-only and firewall-only software
Look 'n' Stop is the closest one I've found... but its not free

 

If you guys are just looking for good inbound, why not just use a NAT router and forget the software firewalls? A router stops all unsolicited inbound traffic, period. What more do you need?

 

Kerodo, part of the question is about laptops. A travelling laptop has no router. So at home you can rely on the router, but in the wild wicked world a software fw is a must.

 

Use Fortinet Personal Firewall..

 

Good point, I wasn't thinking laptops and netbooks... Thanks for pointing that out.

 

Try Comodo, you can customize the installation and install the Firewall only, no HIPS, no AV, no Sandbox.

 

IHMO, it's quite a resource hog, like ZoneAlarm. (I'm not starting a flame war here)

You might want to try the following:

Kerio 2.1.5
Sygate Personal Firewall
Comodo Firewall (without the D+/Sandbox/AV)
Windows Firewall

 

What's your operating system? And have you checked out the Softperfect firewall?
http://www.softperfect.com/products/firewall/

 

Good comment. However, take note of THIS possible chink in SoftperfectFW's armor.

 

Try Fortinet or ZoneAlarm(turn off outbound protection)

 

I had not seen that, so thanks for pointing it out.

 

Thanks for your replies, Sunbelt Kerio and Fortinet seem to be the best options for me.

Vista 32-bit. That firewall seems nice, but I don't think I have enough knowledge to configure it properly.

 

Have you taken a look at Jetico? Their firewall does have HIPS, but you can easily disable it by checking the default ruleset's disabled bypass rule in the Process attack table. I moved to this from Kerio 4 (now Sunbelt) and have yet to find anything as light and simple to configure to get me to switch. Look 'n' Stop comes closest, but Jetico is so much easier to use.

 

No flame war.. But when did you use it last. In the latest version it has optimized its performance a lot. If I am not wrong, I also saw kees1958 recommending it elsewhere..

 

Thats correct ZA firewall driver can consume as little as 2MB on idle and up to 30MB when on duties. It just adapt itself to the memory available and release it as soon as un-needed. At least this is what I see here

Of course resource hog can mean anything, there is always a case where it does not play nice with certain systems or configurations not more not less than other security tools.

 

I last used ZA Pro 9.1, it wasn't playing well with my setup for some reason though. But good thing it's light on your systems/VMs.

Cheers!

 

On that note, does anyone know where I can download Jetico version 1 for an XP user? I believe Jetico 1 is still freeware but I can't find a download link on their site.

 

Here you go.

http://download.cnet.com/Jetico-Personal-Firewall/3000-10435_4-10418587.html

 

Thank you! I really like Jetico 1. It really seems to be the forgotten firewall.

 

Your welcome.

 

You can use Windows Firewall with Windows 7 Firewall Control. That will make it easy to manage and get better protection without HIPS.

 

The link leads to the latest version...
I found something here
http://forum.oldversion.com/programs-support/5104-free-firewall-w98.html

 

The link i posted leads to Jetico version 1, just as acr1965 asked. So how can it be the latest version. And the link on that page you posted is for the same version as i posted?