 
  See your link here
|
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
BONUS LINKS
| Laptops
Toshiba Laptops with Intel® Centrino® Duo. Free Shipping
|
|
|
|
|
June 16, 2003 (Computerworld) --
It's tough enough defending the IT perimeter against spyware, viruses, worms and unauthorized intrusions. But no matter how good their defenses are, companies still risk getting hurt by those they trust most: remote workers. "If anyone wants to attack, all they have to do is drop in a Trojan [horse] and wait for the person to log in," says Dennis Peasley, information security officer at furniture maker Herman Miller Inc. in Zeeland, Mich.
Personal firewalls help, but stand-alone versions don't always protect the corporate LAN adequately. For example, Peasley initially installed ZoneAlarm from San Francisco-based Zone Labs Inc. on 900 laptops. But the distributed personal firewall installations were difficult to monitor and maintain. Peasley now uses Zone Labs' newer, server-based Integrity software to centrally manage those remote personal firewalls. "With any new system we install, the main cost is not the cost of the software, but the cost of managing it," he says. "Centralized management cuts those costs."
Stand-alone personal firewalls don't work well for corporate LAN access because end users have access to the software and tend to misconfigure it or shut it off entirely, and administrators face problems supporting and installing updates. Because the update process is time-consuming, administrators may avoid updates altogether, leaving unpatched clients open to new vulnerabilities.
"I've seen personal firewall software that was individually installed on several large computer systems, and it always becomes a mess," says Kevin Beaver, president of Principle Logic LLC, an information security consulting firm in Kennesaw, Ga. "Configurations and patches were inconsistent, and the administrators spent way too much time on the 'sneaker net,' going around to remedy problems."
The best centrally managed personal firewall systems won't let end users disable the local firewall software or change the settings, says John Pescatore, an analyst at Gartner Inc. in Stamford, Conn. "Users will just say yes to everything, so you have to centrally manage them in a way that is invisible to the client," he says.
Some tools also integrate with antivirus and virtual private network (VPN) software. Pescatore says two of the more advanced products in this arena, Integrity and Sygate Secure Enterprise, from Sygate Technologies Inc. in Fremont, Calif., include a back-end server that can act as a gateway through which remote-user access can be controlled (see diagram, next page).
Peasley uses that feature on his Integrity firewall system. The end user connects to the Cisco VPN 3030 concentrator, which directs the user session to the Integrity server to authenticate the client, checks that the client's antivirus software is up to date and provides any necessary updates before allowing access to the network.
Vendors of related security products and security suites have jumped in with their own centrally managed firewall offerings. These typically include tight integration with sister security products. The downside is that they may be weaker in terms of management capabilities, integration with existing directory structures, reporting features and even the level of security they offer when compared with dedicated desktop firewall management products.
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
|
|
 |
| All Zones Application Performance Zone Business Continuity Zone The File Data Management Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Business Intelligence and Analytics Zone Windows Protection Zone Identity & Security Management Zone |
|
See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
From Laggard to Leader: Transforming the Data Center
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this research paper, free for a limited time, compliments of Webroot!
Read up on the latest ideas and technologies from companies that sell hardware, software and services. 
- Cellular operators say they're ready for Gustav
- IT workers hit hardest by offshore outsourcing, survey finds
- Psystar calls Apple a 'monopoly' in antitrust charges
- More top stories
Security Management ZoneSecurity management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Visit the CDW Security Management Zone now See All Zones
|
 Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.New baits 
|
 Identity & Security ManagementSolve your compliance problems and mitigate risk. Automate, validate and enforce business governance with Novell Identity Management and Security solutions. Learn more in the Identity & Security Management Zone See All Zones |
 In SecurityStripping away the trappings of applications, systems and networks, information is the core asset of most organizations. Our columnist describes how asserting the importance of information governance is crucial to making that asset tangible, addressable and protected. Click here to read the latest column by Jon Espenschied |
