You definitely should consider deploying Checkpoint Integrity Security
Client. Basically it combines SC, and ZoneAlarm with more feature. You
can set dynamic profile and complete protect the user and corporate
network.
Wayne
_____
From: Lachniet, Mark [mailto:mlachniet@sequoianet.com]
Sent: Wednesday, July 27, 2005 10:45 AM
To: Haseeb Chaudhary; firewalls@securityfocus.com
Subject: RE: Checkpoint SecureClient as a personal firewall
It works okay, but you have to remember that it doesn't have as many
features as a "real" personal firewall. Namely, the ACL's are all
configured using the SmartClients and pushed via the policy server. It
does not maintain (as far as I know) any kind of hash database of
"allowed executables". In other words, it doesn't give you a popup when
malware.exe tries to establish an outgoing connection, which is IMO one
of the most useful features of a personal firewall.
Also, if you push a bad policy to the client, you can make problems for
yourself - for example pushing a policy that blocks access to your
policy server might not be fun.
Mark Lachniet
_____
From: Haseeb Chaudhary [mailto:haseeb.chaudhary@FXALL.com]
Sent: Tue 7/26/2005 4:37 AM
To: firewalls@securityfocus.com
Subject: Checkpoint SecureClient as a personal firewall
Hi,
I would just like to mention we're looking at deploying SecureClient VPN
client as a personal firewall - main reason being we can easily
push/change poilicies on the laptop firewall (connecting to Checkpoint
VPN server). The requirement is to provide protection to sales employees
who connect to 'other' networks whilst doing client presentations.
If anyoneone has any experience of using SecureClient as a personal
firewall in a corporate environment I would greatly apprecitae feedback.
thanks inadvance, Haseeb
#####################################################################################
CONFIDENTIALITY NOTE: This communication and any attachments hereto contain
information that may be privileged, confidential and exempt from disclosure
under applicable law. The information is intended solely for the use of the
individual or entity to which it is addressed. If you are not the intended
recipient or the employee or agent entrusted with the responsibility of
delivering the message to the intended recipient, be aware that any disclosure,
copying, distribution of this transmission is strictly prohibited. If you have
received this communication in error please delete or destroy all copies of it
and notify the sender immediately. In addition, although precautions have been
taken to ensure that the data included herein is free from viruses or other
malicious content, we have not verified that such is indeed the case and
disclaim any responsibility attributable thereto.
#####################################################################################
