Security Basics mailing list archives

RE: Client End Firewalls


From: Grant.Orchard () aws aust com
Date: Tue, 5 Oct 2004 10:08:36 +1000





Hi Scott,

I should have provided more detail sorry. I'm looking to centrally manage
this. Employees will be given basic training, more for awareness than "how
to" knowledge. We are planning on developing a corporate rule set which we
can modify upon legitimate requests.

We recently had our comms company come out and tell us about the "great new
zone labs product". Of course, I don't trust them not to be impartial so I
thought you guys could provide some help.
1. Are client side firewalls worth having (yes)
2. Have you had any experience with Zone Labs
3. If not, what client firewall product would you recommend?

Thanks a lot

Grant Orchard
IT Coordinator
Australian Water Services
02 9224 7916
0403 457 315


                                                                           
             staylor@velectric                                             
             .com                                                          
                                                                        To 
             05/10/2004 06:50          securityfocus () delahunty com,        
             AM                        security-basics () securityfocus com,  
                                       Grant.Orchard () aws aust com          
                                                                        cc 
                                                                           
                                                                   Subject 
                                       RE: Client End Firewalls            
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           
                                                                           







What would be a good one to implement? I would be interested in knowing:
1. Would you train all employee's on managing the local firewall?
2. Would you just have your IT people configure it and not let individual
users mess with it?
3. It seems it could create a lot of administration overhead.


Thoughts on this would be greatly appreciated.


Scott


-----Original Message-----
From: Steve [mailto:securityfocus () delahunty com]
Sent: Thursday, September 30, 2004 6:21 AM
To: security-basics () securityfocus com; Grant.Orchard () aws aust com
Subject: Re: Client End Firewalls


These can be very effective at blocking incoming traffic to the
workstations
and also the ones like from Symantec get firewall policy/rule updates
downloaded periodically.


Consider the situation where some of your folks with laptops are at a
customer site, or a vendor site - they are wide open to threats without
desktop firewall protection.  Consider the situation where a worm gets
inside your network somehow, it will bounce around infecting many machines
if there is no desktop protection.


----- Original Message -----
From: <Grant.Orchard () aws aust com>
To: <security-basics () securityfocus com>
Sent: Tuesday, September 28, 2004 12:27 AM
Subject: Client End Firewalls









Hi guys,


How much protection do you believe client side firewalls provide? My boss
has asked for my thoughts on a system like Zone Labs are now offering. Can
anyone provide me with their thoughts on what benefits this actually
provides?


Many thanks


Grant Orchard
NOTICE - This e-mail (and any attachments) is confidential. It may contain
privileged information or copyright material. You should not read, copy,
use or disclose it without the written authorisation of AWS.  If you are
not an intended recipient, please contact AWS by return e-mail and then
delete both messages.  AWS does not accept liability in connection with
computer virus, data corruption, delay, interruption, unauthorised access
or unauthorised amendment.







Current thread: