-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: Did you buy your last car with cash or on a finance plan?
Best firewall
- Thread starter Noah
- Start date
LazyLion
King of de Jungle
Completed that for you.
hehe... maybe I have been lucky... but it has always worked fine for me so far.
I tried a few other firewalls several years ago... but they all quickly became too much hassle... and were too dumb to figure out which programs should automatically be allowed. Was not worth the effort. I'll stick with my anti-virus and anti-spyware.
Roman4604
Executive Member
The problem with these 'firewall' debates is that the term is so wide-ranging & convoluted these days that one is rarely comparing apples with apples. The term could refer to (in order of sophistication) ...
a. Something that does blocking at a layer 3/4 protocol/port level with some basic reflexive intelligence (i.e. allow inbound replies for outbound initiated sessions)
b. Something that does a. but also has intimate knowledge of the 'rules of operation' for the most popular protocols so that it can detect abnomalities in session states (refered to as stateful inspection)
c. Something that does a. and/or b. but for certain protocols has a layer 7 (application) understanding with which it (transparently) proxies/manages session with more depth than b. (refered to as ALGs - Application Layer Gateways)
d. Something that does a combination of a./b./c. but on top of that also has an understanding of what the content passed should look like (or more specifically NOT look like) by doing deep inspection of content & state (e.g. IPS -Intrusion Prevention System, DoS prevention, Anti-Virus, Anti-Spam, Content/URL filtering etc)
a. Something that does blocking at a layer 3/4 protocol/port level with some basic reflexive intelligence (i.e. allow inbound replies for outbound initiated sessions)
b. Something that does a. but also has intimate knowledge of the 'rules of operation' for the most popular protocols so that it can detect abnomalities in session states (refered to as stateful inspection)
c. Something that does a. and/or b. but for certain protocols has a layer 7 (application) understanding with which it (transparently) proxies/manages session with more depth than b. (refered to as ALGs - Application Layer Gateways)
d. Something that does a combination of a./b./c. but on top of that also has an understanding of what the content passed should look like (or more specifically NOT look like) by doing deep inspection of content & state (e.g. IPS -Intrusion Prevention System, DoS prevention, Anti-Virus, Anti-Spam, Content/URL filtering etc)
Last edited: