Kerio Personal Firewall 4.2.0 Released

http://www.kerio.com/kpf_download.html

Release notes:

4.2.0 - July 21, 2005
+ added Host Intrusion Prevention System (HIPS). HIPS prevents attacks that reach vulnerable applications from succeeding by blocking any illegitimate behavior attempted by the affected applications. This feature is available in registered version only.
+ simpler configuration window
- System Security was renamed to Behavior Blocking to meet current industry conventions.
- Intrusions were renamed to NIPS (Network IPS) to distinguish between network intrusions and new Host Intrusions (HIPS).
- New Intrusions pane was created. It includes three types of intrusion blocking - NIPS, HIPS and Behavior Blocking.
- 'System' and 'Intrusions' logs were renamed to be consistent with new Intrusions pane.

- dropped support for Windows 98, ME, NT4.
- many improvements and bug fixes

 

They have managed to get it out before Zonealarm 6 next Monday

 

Sounds pretty good to me. Isn't intrusion blocking included in the 4.1.3 free version though, or is HIPS a different thing?

 

i posted what HIPS is here

 

http://www.kerio.com/beta_kpf_history.html

 

How it's the resources usage?

 

The beta was annoyingly heavy on GDI resources

As of now kpf4gui.exe has 2,817 GDI objects and 1,472 user objects
Here is the current working set and private bytes for the latest beta
kpf4gui WS 2,444K Private 6,228K GDIObj 2,817 UserObj 1,472
kpf4ss WS 14,892K Private 11,364K GDIObj 6 UserObj 3

By comparison a "heavy" ZA 5.5
zlclient WS 3,104K Private 3,896K GDIObj 310 UserObj 263
vsmon WS 7,584K Private 10,988K GDIObj 5 UserObj 12

This was the beta of course will see what the release version looks like after a few days of running

The peak working set and peak private byte values were a good bit higher
I haven't included the virtual memory size for a simple reason and thats because I don't use it as a primary resource usage indicator, ymmv
I look at working sets and page faults and other things (like what I was doing during the test period) that don't easily reduce to single number comparisons

Regards

 

It seems that it continues to use more resources than others firewalls...

 

Thanx Gottadoit, I understood

Cause for one reason I keep on getting attracted to their GUI, no kiddin, but I choose another one, but still, they where one company once and well...

 

I am still having the full process path identification problem with this version where it detects processes as I have described here and here. I suspect it may be a conflict with something on my system although I am not sure what but it has been a major problem for me since 4.1.3 came out and a slight problem for 4.1.2 when I enabled the application control which I have since abandoned as a direct result of this problem in favour of PeerGuardian.

Morpheus

 

Does KPF 4.2.0 fix the problem I found so annoying in KPF 4.1.3 when I trialed it - the inabiity of the program to remember the ordering of the rules on the packet filter screen?

 

So far it looks pretty good here. They seem to have fixed all the bugs that annoyed me before. Don't know about some of the other ones mentioned above though. I'm liking it, even though it runs at about 22 mb ram usage total here. Not the lightest but then again, it could be worse.

 

The new Kerio PFW is nice, but too bad that they drop Win98/ME support. The recently released ZA, Outpost, Norton still support Win98/ME, thanks to them.

 

That is one issue I thought would provoke more flak than it has done so far. Not that it worries me personally, but there are still a lot of 98/Me users out there.