RE: Checkpoint SecureClient as a personal firewall

It works okay, but you have to remember that it doesn't have as many features 
as a "real" personal firewall. Namely, the ACL's are all configured using the 
SmartClients and pushed via the policy server.  It does not maintain (as far as 
I know) any kind of hash database of "allowed executables".  In other words, it 
doesn't give you a popup when malware.exe tries to establish an outgoing 
connection, which is IMO one of the most useful features of a personal firewall.
 
Also, if you push a bad policy to the client, you can make problems for 
yourself - for example pushing a policy that blocks access to your policy 
server might not be fun.
 
Mark Lachniet

________________________________

From: Haseeb Chaudhary [mailto:haseeb.chaudhary@FXALL.com]
Sent: Tue 7/26/2005 4:37 AM
To: firewalls@securityfocus.com
Subject: Checkpoint SecureClient as a personal firewall



Hi,

I would just like to mention we're looking at deploying SecureClient VPN client 
as a personal firewall - main reason being we can easily push/change poilicies 
on the laptop firewall (connecting to Checkpoint VPN server). The requirement 
is to provide protection to sales employees who connect to 'other' networks 
whilst doing client presentations.

If anyoneone has any experience of using SecureClient as a personal firewall in 
a corporate environment I would greatly apprecitae feedback.

thanks inadvance, Haseeb