In-Reply-To: <b7bc1b1f041125125312da4f0f@mail.gmail.com>
Hi,
For Network activity Control under Windows,
I'd prefer :
-Simple TCP/UDP Filter or Windows Server 2003 Integrated Firewall for Layer 3/4
Filtering
-URLScan filtering for HTTP Traffic
-Best Pratices : Patching / Least Privilege ...
-Great things Most companies can't afford (money or brains !) : real secure
server agents, tripwire ...
In any case, just a personnal advice.
But I Think Symantec and ISS are starting to do kind of mixed Firewall/Host
Intrusion products (Intrusion Prevention as says the market...).
Fab
My favorite pick in such a case is an OS independant software
firewall: Smoothwall. It requires another dedicated PC, although that
PC is likely something your compamy has sitting in a closet collecting
dust (I've used a PII 350 to handle traffic for roughly 4,000 people
and dual T1s). While this obvisouly isn't exactly what you had in
mind, it's something you should consider. There is plenty of support
on the web for Smoothwall:
- http://www.smoothwall.org/
You may want to look into the corporate line if you're concerned about traffic:
- http://www.smoothwall.net/ (or)
- http://www.smoothwall.net/products/roadmap.html
--
Peace. ~G
On Wed, 24 Nov 2004 09:47:55 +0600, zans@mail.ru <zans@mail.ru> wrote:
Hi guys,
Any recommendations on a good software firewall for Windows 2003 Server
+ IIS 6.0 environment? Important note: we host multiple sites on our
server and they are very popular. E.g. Visnetic Firewall just hang on or
restarts the server several times a day because can not process all
traffic...
--
Andrey
