OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] PC Firewall Choices

From: John LaCour (johnlacourgmail.com)
Date: Wed Jan 18 2006 - 19:09:53 CST


On 1/17/06, Valdis.Kletnieksvt.edu <Valdis.Kletnieksvt.edu> wrote:
>
> Even more important, a hardware firewall can't be compromised as easily
> by malware that's on a host behind the firewall. It's easy for a program
> on a PC to tell ZA to look the other way. ...

Not all security software is equal. ZA actually does a very good job
of protecting
itself from tampering compared with the vast majority of AV/AS/FW software.

A hardware firewall has no knowledge of the application involved which is
another dimension to policy that a desktop firewall gives you control over
which a hardware firewall does not.

Personally, I advocate using both.

-John
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/