new firewall: which one?

Hi,
I want to change my old Sygate Personal Firewall with a new one.
The new one have to have:

- light on resources
- free
- easy to use (similar to Sygate)

Someone can help me to find one?
Thanks

zeppelin

 

zonealarm. that's a no brainer.
i retract my statement.
im undecided after reading this forum now. lol

 

You may want to have a look at Sunbelt Kerio. (http://www.sunbelt-software.com/Kerio.cfm) It's a bit heavier than Sygate, but offers much better protection than ZA free.

 

both suggestions use up a lot of memory. if you're looking for something lighter, try these:

-Windows XP SP2 firewall (yeah i know, but its not too bad really. uses really low resources)

-GhostWall (inbound only, but basically a lot better than windows firewall imo. uses SUPER low resources)

-LooknStop Lite (rule based firewall. requires a lot of configuring though)

-Jetico (uses decent amount of memory and is also rule based. its in beta right now and hasnt been updated lately, and i personally dont like it.)

-Netveda (similar to sygate basically. seems to be good but theres really been no hint if theyre still working on it or not)

-Filsecab (similar to jetico is all i can really say. seems to be dead in terms of service and updates)

-Kerio 2.15 (no longer in progress, but a very basic, light firewall that most say is quite good. i however don't like things that arent in progress anymore)

P.S yeah i'd say kerio 4.2.3 free provides more protection than ZA free. i use kerio 4.2.3 right now and i love it

 

@ Zeppelin,

why don't you try some of them (not all on the same time), post your feedback and maybe you can explain us why you like FW x or FW y ...

- light on resources
- free
- easy to use (similar to Sygate)

GhostWall? Kerio 2.1.5? ... older Outpost?

 

zeppelin:

I just replaced Sygate with Sunbelt Kerio. Dont be scared of kerio being rules based as packet rules are optional. Its so called application rules used by default, act the same as the "remember tick box" in Sygates access pop-ups, giving you a simple application list of ask/allow/block similar to Sygate. Very informative, easy for the novice user with even more for the advanced. All other options are setup already and mine stealthed "out of the box".

I tried other rules based firewalls and couldnt understand them, this ones easy.

 

steveUK .
Well put . Simple , effective , and great for advanced users as well .

 

Using Netveda here for some time now. Swapped over from Sygate free, its lighter than Sygate, and once mastered (does'nt take too long) is stable and reliable (I have found it so anyway).

 

Go on ebay and find yourself a Fortigate hardware firewall...

1. NO system resources.
2. IPS/ Antivirus built in (push installs and some of the quickest response time to new threats).
3. NO SYSTEM RESOURCES!!!


I ditched my software firewall/ av's months ago and have never been happier.

If you say..well there is no outbound protection, which is true, then use Appdefend or safensecure. These are much lighter then a firewall and provide outbound protection. I still think that process controll is much moreimportant then outbound control. OUtbound protection is so overrated unless you install "free programs" found on the net. I have been running w/o outbound protection for months, running a AV and Spyware programs every month to check for malware/ virus/ trojan's and I have had not one.

 

I know it's not free, but when I was looking for a firewall with the same requirements, I found nothing better than Look'n'Stop.

Of course you could also use something like CHX-I or GhostWall with something like Prevx1 R for a free solution, albeit a little piecemail. AppDefend and Safe'n'Sec are good apps as well, although not free.. SnS also just hooks Winsock, so you wouldn't have full outbound protection, where Prevx1 uses an actual driver for network control, as a real firewall would. I can't comment on AppDefend, though, as I've never used it.

Something like Fortinet would be nice, but the price is pretty prohibitive.. of course if I paid that much, I'd probably want it to be a one-and-only solution as well. You can always get an SPI router for less (with less features), however, or set up a Linux firewall for the price of an old computer (which I'm seriuosly considering.. the tradeoff with that is a little added complexity).

 

Sorry, but you're wrong at this part.
SnS has its own driver-based network control. Altough it's only TDI filter for now (not NDIS filter).

 

Sensiveguard is pretty light.

 

what about stingray firewall?

 

i already told ppl how the stingray firewall performs u may go hear and read for urself k if u have any more quetions about it just ask.

https://www.wilderssecurity.com/showthread.php?t=104760&page=3

 

i mustve missed that, since i unsubscribed from the thread. thx. also, for people who play online games or use p2p, is using the bypass button the only chioce?

 

yeah but i nvr had to use it with limewire or bit comet. or world of warcraft but yes its the only solution but i think once it lets the program thru u can actiivate it by pressing the button again.

 

Thanks all for the answer.
Now i am testing Filseclab and it seems good.
I had test it on www.grc.com (shield up!) and it seems work good.
Anyone is using this and can give me any suggest?
Where i can find a good guide about Filseclab?

@ SwordOfSecurity...seems to be dead in terms of service and updates) do you think the Filseclab project is dead?

zeppelin