Checkpoint SecureClient as a personal firewallAlternatively, Integrity
Secure Client from Check Point would be a better option. This uses all the
good stuff from SC and adds the extra features from Integrity (Zone Labs
product - Zone labs are a Check Point company). ISC v6.0 also has an
advisory option which applies best practices to your corporate policy and
pre-emptively blocks known and unknown malware automatically. Go to
http://www.checkpoint.com/products/integrity_sc/index.html for further
details.
-----Original Message-----
From: Lachniet, Mark [mailto:mlachniet@sequoianet.com]
Sent: 27 July 2005 15:45
To: Haseeb Chaudhary; firewalls@securityfocus.com
Subject: RE: Checkpoint SecureClient as a personal firewall
It works okay, but you have to remember that it doesn't have as many
features as a "real" personal firewall. Namely, the ACL's are all configured
using the SmartClients and pushed via the policy server. It does not
maintain (as far as I know) any kind of hash database of "allowed
executables". In other words, it doesn't give you a popup when malware.exe
tries to establish an outgoing connection, which is IMO one of the most
useful features of a personal firewall.
Also, if you push a bad policy to the client, you can make problems for
yourself - for example pushing a policy that blocks access to your policy
server might not be fun.
Mark Lachniet
----------------------------------------------------------------------------
--
From: Haseeb Chaudhary [mailto:haseeb.chaudhary@FXALL.com]
Sent: Tue 7/26/2005 4:37 AM
To: firewalls@securityfocus.com
Subject: Checkpoint SecureClient as a personal firewall
Hi,
I would just like to mention we're looking at deploying SecureClient VPN
client as a personal firewall - main reason being we can easily push/change
poilicies on the laptop firewall (connecting to Checkpoint VPN server). The
requirement is to provide protection to sales employees who connect to
'other' networks whilst doing client presentations.
If anyoneone has any experience of using SecureClient as a personal
firewall in a corporate environment I would greatly apprecitae feedback.
thanks inadvance, Haseeb
- - -
Unipalm e-Business
Aruba | Appsense | Citrix | FaceTime | Ipswitch | Radware | ThinPrint |
WebTrends | Zultys
Unipalm e-Security
ActivCard | Blue Coat | Check Point | Clearswift | Crossbeam | Fortinet
GuardedNet | Internet Security Systems | nCipher | NetIQ | Nokia | PolicyMatter
SafeNet | Symantec | Trend Micro | Tripwire | Websense
Unipalm Professional Services
Support | Consultancy | Training | Security Testing
N-Able | SafeAnet | TraceSecurity | Uni-Finance
- - -
CONFIDENTIALITY AND DISCLAIMER NOTICE
This e-mail is intended only for the addressee named above and the contents
should not be disclosed to any other person nor copies taken. Any views or
opinions presented are solely those of the sender and do not necessarily
represent those of ComputerLinks (UK) Ltd. (trading as Unipalm) unless
otherwise specifically stated. As Internet communications are not secure we
do not accept legal responsibility for the contents of this message nor
responsibility for any change made to this message after it was sent by the
original sender. We advise you to carry out your own virus check before
opening any attachment as we cannot accept liability for any damage
sustained as a result of any software viruses.
- - -
