Skip the navigation
)

Sending Firewalls Home

A firewall protects your network against outside access or probing. How well protected are your remote users and telecommuters?

By Barry Nance
May 28, 2001 12:00 PM ET

Computerworld - From Iraq, Libya, China, New York, even your hometown, the bad guys' software is constantly probing the Internet, examining consecutive IP addresses for information. Ah! The software finds an active IP address. What sort of device is it? Does it have a network management agent? Whose protocol stack is the device running? Is the IP address permanently assigned? Might the device be a good target for a virus, Trojan or worm? Is port 23, which is used by telnet, open? Might it be worth flooding the device with denial-of-service packets? Does the IP address correspond to a registered domain name? Is the network node running Web server, FTP server, database server or file sharing software?

For more on Firewalls see Four Personal Firewalls Reviewed

A sophisticated probe can discover a staggering amount of data and store it for future use. If an employee's home PC has a persistent Internet connection via Digital Subscriber Line (DSL) or cable, the probe's database almost certainly contains his IP address and network node data. Even dial-up users with dynamically assigned IP addresses can be at risk if connections last more than a half-day. An employee who routinely handles company business and confidential data from his home computer is also at risk.
A number of companies offer personal firewall products to help block Internet-based intruders. I tested four of the best-known - Norton Personal Firewall 2001 3.0 from Symantec Corp., BlackIce Defender 2.5 from Network Ice Inc., Tiny Personal Firewall Build 12 from Tiny Software Inc. and ZoneAlarm Pro 2.6 from Zone Labs Inc. - to find out which offers the best deterrent to Internet probes. Unlike corporate firewalls that operate on a networkwide basis, these tools guard a computer by inserting themselves into the PC's TCP/IP protocol stack. The firewall intercepts and examines each inbound or outbound Internet message. It distinguishes, for example, between legitimate messages that are responses to your Web browsing and illegitimate messages that you never asked for. The software also uses network address translation to substitute a bogus IP address inside your computer's outgoing Internet messages. When the bad guys don't know who you are, they can't penetrate your PC.
I tested each firewall on an IBM ThinkPad A21m with an 850-MHz Pentium III, 512MB of RAM and a 32GB hard disk. The ThinkPad was connected to the Internet over a 384K bit/sec. DSL connection feeding a 3Com Corp. 100M bit/sec. Ethernet port.
I used many tools to test security, including Internet Scanner from Internet Security Systems Inc. in Atlanta


What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Don't have an account yet?
Additional Resources
Security KnowledgeVault
WHITE PAPER
Security is not an option. This KnowledgeVault Series offers professional advice how to be proactive in the fight against cybercrimes and multi-layered security threats; how to adopt a holistic approach to protecting and managing data; and how to hire a qualified security assessor. Make security your Number 1 priority.

Read now.

Cut Communications Costs Once and for All
WHITE PAPER
New IP-based communications systems are being deployed by small and midsized businesses at a rapid rate. Learn how these organizations are enabling faster responsiveness, creating better customer experiences, speeding office or mobile interactions, and dramatically reducing existing communications costs.

Read now.

White Papers
Workload Automation Challenges and Opportunities
This Executive Brief discusses IDC's perspective on how enterprise workload management requirements are changing and highlights the ways that workload automation solutions can...
Practice Management: Double Billing Rate and Improve Patient Services
Would you like to double your billing rate and achieve faster payment for services?

Download this customer success story to see how One Health...
Mission Critical Data Explosion and Customer Case Study
Would you like to double your tier 1 storage capacity while simultaneously reducing your storage footprint?

Download this customer success story to see how...
Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios
Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.
Database Activity Monitoring Is Evolving
Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.
Webcasts
Live Webcast
Data Privacy and Protection in Production Environments: New Research from Ponemon Institute
Date: Wednesday, June 13, 2012, 1:00 PM EDT / 10:00 AM PDT

In a recent study conducted by Ponemon Institute, fifty-five percent of respondents...
Live Webcast
A Geek's Guide to Presenting to Business People
Live Webcast: Wednesday, June 20th at 1:00 PM EDT

Join this live webinar with Paul Glen, author of Leading Geeks, to learn how to...
Live Webcast
Today's NAS: A Solution Beyond Old Limits
Date: Tuesday, July 17, 2012 2:00 PM EDT

Traditional NAS systems don't scale beyond fixed limits. Proliferation of NAS systems leads to management...
Distributed Database Security with Real-time Monitoring
View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with...
InfoSphere Warehouse Packs Demo
These flash modules make warehousing more tangible and relevant to business users through detailed explanations of the InfoSphere Warehouse Packs.
Delivery Management -- Extending Lifecycle Management
Date: Wednesday, June 20, 2012, 1:00 PM EDT

Siloed organizations continue doing the wrong things and doing things wrong, leading to increased costs,...
Leverage automation today to reduce IT complexity
Date: Tuesday, June 5, 2012, 2:00 PM EDT

Whether your B2B complexity is caused by multiple technologies due to M&A, business or application specific...
Redefine Expectations in the Data Center
Need to do more with less? Watch this video to learn how HP ProLiant Gen8 servers can help your business deploy servers three...
Newsletter Sign-Up

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all newsletters | Privacy Policy
IT Jobs