[Dshield] "Personal Firewalls" are mostly snake-oil"
russ.washington at vaultsentry.com
Mon Jul 22 15:01:17 GMT 2002
I'll keep this in mind the next time one of my "expert home users" who takes
his "expertise" into the office tells me that his company doesn't need an
expensive firewall, because all they have to do is put Zone Alarm on one of
their servers and they'll be ok (heard this one too many times to count).
Yeesh. Nothing personal Richard, not flaming. Just pointing out that no,
these products are *not* on par with anything else out there legitimately
labeled as a "firewall" on the market-- Check Point, NetScreen, Cisco, etc.
Not even close; and anyone who thinks they are is beyond "ill-informed."
They are downright blind to their own lack of expertise.
Is Zone Alarm than nothing? Sure, so long as the user remembers that what
they have is a tricycle, not an SUV, and the moment they get broadsided by a
Lincoln Town Car they're going to suffer just like someone who had no
vehicle at all.
As far as the logs, well, they weren't much use to the last guy who came at
me with this. He didn't know how to read them. But he insisted that they
held the answer to his security worries. Funny that he was steadfast that
the answer to his security questions was sitting in the middle of something
whose contents he didn't have the expertise to interpret (and no, what he
was looking for was not in there).
Just my two bits :)
From: Richard Stead [mailto:richard.stead at bigpond.com]
Sent: Sunday, July 21, 2002 2:02 AM
To: list at dshield.org
Subject: Re: [Dshield] "Personal Firewalls" are mostly snake-oil"
As rightly stated by Jens Knoell,
Firewalls are simply one layer of a defence against unwanted intrusions.
The initial statement that "most Firewalls are mostly snake-oil" is
relatively ill-informed and simply not true. For those home users of
ZoneAlarm/Tiny Personal Firewall etc.... I would strongly recommend that you
stick to your guns and ignore such statements. Not only do they provide some
protection but they also provide their logs for our defence and early
----- Original Message -----
From: "Keith G" <keith.gainford at which.net>
To: "Dshield" <list at dshield.org>
Sent: Sunday, July 21, 2002 6:21 AM
Subject: [Dshield] "Personal Firewalls" are mostly snake-oil"
> In view of the above statement taken from Sam Spades site. Are home
> users wasting their time using so called "Personal Firewalls"?.
> Keith G
> Home User
> Zone Alarm Pro 3.0.133
> Dshield mailing list
> Dshield at dshield.org
> To change your subscription options (or unsubscribe), see:
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
More information about the list