What do you feel about Jetico Personal Firewall

What do you feel about Jetico Personal Firewall

From this link http://www.firewallleaktester.com/tests.php , the result is very good. It stands out clearly from the crowd.

What do you think about this free (but best[?]) firewall?

Does this product intervene my Windows internet connection sharing(ICS)?

After all, does anyone know more websites which analyse the performance of different firewalls? I would like to read more, instead of just relying on one report only.

 

If I remember correctly, the ICS will be blocked, as there was no application associated with the packets (connections), and Jetico could not "see" the IP of the client PC. (so no pass through rule could be used,..)

EDIT:
I have just had a thought on this (ICS), and will test this out tomorrow,....

 

wai_wai, all i know is jetico is damn good this and comodo do an outstanding job protecting your machine.

jetico is easier on the resources but is more geared toward intermediate to expert users.

comodo is more of a resource hog but is easy enough for noobs (like me) to use

 

Hi zopzop,

I think the main problem with Jetico, is the lack of rulesets available (for application access/connections). I did post some (that where asked for),.. and will create/ post others if asked for.

 

Hello!

I'm not experienced user, so mayby my opinion won't be valuable, but...

In my (very humble) opinion, Jetico is great.
Today I was "playing" with "regtest" from GhostSecurity and SecurityTest (Trojan Demo) from Trustware.

Kerio - failed both of them
AntiHook - failed Trojan Demo; RegTest passed I think - blue screen, but after reboot ther was no sign of RegTest (it loads pop up at startup informing, that security was compromised or something)
GMER - passed Trojan Demo; with Reg Test - hmm... values to registry were added I suppose, computer had restarted but when booting up it showed warnings about RegTest loading and it was able to stop it (when I chose this option PC booted up and restarted automaticly and my quick launch icon dissapered )) )
Jetico - passed both with no blue screen and no rebooting

I wonder, why it doesn't pass all Wallbreaker test on my PC :/

 

I tried Jetico last year and i found it very hard to understand. So I gave up when I didnt understand what I was blocking/allowing and why.
But I do belive that Jetico (and Core force) seems to be really good apps. I have since then installed Tiny firewall 2005, it is not the easiest to understand either but this far I think I can handle it. But since Tiny Firewall is abandonware more or less (CA who bought sells it but do not care about the customers, I would not recommend anyone to pay for it) I will absolutely give Jetico another go when Tiny becomes obselete.

 

Jetico is worthless to me. I had trouble setting it up. And the fn popups. About 1 every 10 seconds. Nah give me Sygate or GhostWall.

 

Zapjb: Did You read the manual?

Well, I don't kwon, what each packet flag mean etc., but for me - a computer idiot - and of course as far as my very very little knowledge allows me Jetico is far easier to configure than any other firewall.

Idea of doing tables of rules for groups of applications and ability to "redirect" programs to tables instead of doing rules only for applications only is - in my opinion - very useful. For example: If You want Firefox to be Your primary browser, Opera - browser for uhmm... potentialy dengerous ;P pages , IE - browser for that pages, which are not compatible with those two above and You want to use some kind of "web scanner" like Avast Web Scanner - You put it all to table "web browser" and don't need to waste Your time for setting up the same rules for various applications. If You have a table for X application and newer version came out - all You need to do in such situation is to "redirect" it with one mouse click to program table when jetico asks and - eventually - delete obsolete "redirection" for older version. And that's all.

After reading a manual - and on level of unexperienced user who doesn't know what are IP flags (like me) etc. and is able to do only basic port/address/protocol configuration - it becomes easiest one to use. I think, that advanced users would find there many many options, that are hard to find in other firewalls.

I forgot - max 8-9 mb of memory usage on my PC, little CPU, stability, no 1 minute longer booting extra and things mentioned in my previous post

 

Hi Stem

It would be interesting if you are able to post a rule set for Jetico. I have never managed to get it to do anything useful and have just given up on it. Is it Win version dependent? I use 2k and don't run it on C drive. Presumably some things would have to be changed locally.

 

I look very very forward to your reply.

 

Apart from Jetico, do you think which firewall can be about on a par with it or come close to it, and a bit easier to use for the less advanced users?

ZoneAlarm?

 

Welcome Rostek!

Congratulation! you be first poster on this forum who has
understand how Jetico work. and you have right, all is in Jetico help!

Congratulation! walk-up!

 

First? Hardly, I made the same points months ago. And yes, you need to understand the logic of jetico rules...

If you don't understand the basic factory settings, there is no point in using anybody else's ruleset, I find the factory settings with some minor modifications is still the best.

But of course the main problem with Jetico is that it doesn't run as a service , which is bad for a firewall..... I experimented with a solution that seems to work. But who knows?

 

I have tried every firewal there ever was.
Sygate was good and Outpost but I had to abandon Jetico for my reasons.
I am sure you all know. It is not for the average user by any means.
I still think one of the best is Bitguard which none ever talk about.

controler

 

I run virtual machines using bridged networking so that every VM gets its own IP from my DHCP server. I have a range of 10 IP's that my DHCP server gives out which is enough for me. Then I use a subnet of 14 IP's on 192.168.0.0 network that covers that range and allows those addresses and therefore Jetico allows all my VM's internet access. Of couse the VM's need their own firewall installed for protection. It has been years since I've played around with ICS because it is so inferior to a router IMO. I think doing something along these lines might work for ICS as well. If anyone knows differently, then by all means, correct me.

 

jetico is a powerful and configurable firewall somewhat comparable to core force and tiny. it comes at a price however, its prompts numerous alerts and is not particularly easy to setup. theres probably a default ruleset, but how secure can it be?

 

Hi djg05,

As I have mentioned before, the rulesets I post are program_rulesets, I posted some on this thread here post#106. I have in the past, changed the complete Jetico ruleset (changed the logical flow of the rules) but decided that Jetico know best on this.
You could, if required (if no program ruleset is available), allow a program ALL TCP Outbound, and the SPI would block any inbound connection attempts (this is how a number of firewalls are configured, to save a lot of popups for all the local ports used.) The main thing to remember, is not to allow inbound connections for a program, unless it it absolutely necessary. Inbound is required for such programs as Torrent clients / P2P software, but you should be restrictive in the ports you allow the inbound (only allow inbound on the ports required, dont allow All inbound)

Olaf posted a changed ruleset for Jetico (to try and make things easier for Jetico users), but I believe the ruleset will allow inbound connections for browsers, I dont have a spare PC available at present to run Nmap against this ruleset to check (to confirm or deny).

 

Hi Wai_Wai,

I will set up as soon as I possibly can, finding time (and spare/downtime PC) these days is not easy (very busy with work).

 

Thanks Stem, I will take a look at that.

 

I must say again.

Welcome Rostek!

Congratulation! You are first to say it, and really first in this forum to say,

three things intrinsically for Jetico!

1. In my (very humble) opinion, Jetico is great.

2. Jetico is far easier to configure than any other firewall.

3. Did You read the manual?

(from Rostek post, in only two!! this guys no need spare PC/nmap to understand what
Jetico accept/reject).
Only for Rostek! go "Log level" for any table/rule and experiment
with (debug,info,warning ecc..) then go to Jetico Log screen, you can see Jetico work,
God's laughter on this! have fun..

Congratulation again and walk-up! come back!

 

Is Jetico developed anymore? As far I can see the latest version is almost a year old - 19th july 2005

 

Yep, it's still being developed.
They're working on the next version (2.x, i guess) although it's not mentioned in the site.
Got that info from their support via mail.

 

Yes next version is coming (2.x). No dates set yet. Will cost some money (shareware version, maybe lite/free coming little later).

 

If 2.0 is going to be payware, then it better be something simply amazing to make me upgrade to it. I don't see any reason right now to have to upgrade from the current version. I works smoothly for me.

 

Will Jetico v2.0 be detected by Windows Security Centre?