Sending Firewalls Home

A firewall protects your network against outside access or probing. How well protected are your remote users and telecommuters?

By Barry Nance

May 28, 2001 12:00 PM ET

Computerworld - From Iraq, Libya, China, New York, even your hometown, the bad guys' software is constantly probing the Internet, examining consecutive IP addresses for information. Ah! The software finds an active IP address. What sort of device is it? Does it have a network management agent? Whose protocol stack is the device running? Is the IP address permanently assigned? Might the device be a good target for a virus, Trojan or worm? Is port 23, which is used by telnet, open? Might it be worth flooding the device with denial-of-service packets? Does the IP address correspond to a registered domain name? Is the network node running Web server, FTP server, database server or file sharing software?

			For more on Firewalls see Four Personal Firewalls Reviewed

A sophisticated probe can discover a staggering amount of data and store it for future use. If an employee's home PC has a persistent Internet connection via Digital Subscriber Line (DSL) or cable, the probe's database almost certainly contains his IP address and network node data. Even dial-up users with dynamically assigned IP addresses can be at risk if connections last more than a half-day. An employee who routinely handles company business and confidential data from his home computer is also at risk.
A number of companies offer personal firewall products to help block Internet-based intruders. I tested four of the best-known - Norton Personal Firewall 2001 3.0 from Symantec Corp., BlackIce Defender 2.5 from Network Ice Inc., Tiny Personal Firewall Build 12 from Tiny Software Inc. and ZoneAlarm Pro 2.6 from Zone Labs Inc. - to find out which offers the best deterrent to Internet probes. Unlike corporate firewalls that operate on a networkwide basis, these tools guard a computer by inserting themselves into the PC's TCP/IP protocol stack. The firewall intercepts and examines each inbound or outbound Internet message. It distinguishes, for example, between legitimate messages that are responses to your Web browsing and illegitimate messages that you never asked for. The software also uses network address translation to substitute a bogus IP address inside your computer's outgoing Internet messages. When the bad guys don't know who you are, they can't penetrate your PC.
I tested each firewall on an IBM ThinkPad A21m with an 850-MHz Pentium III, 512MB of RAM and a 32GB hard disk. The ThinkPad was connected to the Internet over a 384K bit/sec. DSL connection feeding a 3Com Corp. 100M bit/sec. Ethernet port.
I used many tools to test security, including Internet Scanner from Internet Security Systems Inc. in Atlanta

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Additional Resources

Xerox

Win a color printer!

By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!

Microsoft

Upgrade to Internet Explorer 8 today.

Save time and mitigate security risk. Deploy it now.

Sybase

NEXT-GENERATION MOBILITY PLATFORMS

In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Five Steps to Successful IT Consolidation
Has your Enterprise made the strategic decision to consolidate remote site IT infrastructure into central data centers? Then you have probably discovered that...

Three IT Strategies to Cut Cost Intelligently
Forrester and BMC Share Tips on Consolidating, Automating, and Cutting Cost. Don't make hasty cost reductions. When the economy recovers, ensure your IT...

Microsoft SharePoint Performance Brief
This is a Performance Brief that illustrates how Riverbed Steelhead appliances accelerate MS SharePoint Services over the WAN. 2 pp....

Usability Is Everything
Learn what sets Workday's HR and Payroll solutions apart from the competition....

IBM Lotus Notes Performance Brief
This is a Performance Brief that illustrates how Riverbed Steelhead appliances accelerate Lotus Notes R7....

The Value of Real SaaS at Workday
Cost savings, speed to value, and innovation brought to the enterprise by Workday's software-as-a-service solutions for HR and Payroll....

The True ROI behind WAN Optimization
Looking for solid data behind the cost-savings story of WAN optimization? In this paper, NetForecast analysts interviewed customers who have deployed this solution,...

SaaS at Flextronics, Inc.
Dave Smoley, CIO of Flextronics, discusses the real value of software-as-a-service and why he chose Workday for his HR solution....

Forrester Consulting - Optimizing Users and Applications in a Mobile World
Are your workers going increasingly mobile? Don't wait for their calls to slam Support when they experience poor application performance on the road....

Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...

All White Papers | All Webcasts