Linked by Thom Holwerda on Sun 18th Feb 2007 20:29 UTC, submitted by Jennifer Logan
Windows "What is it with the Windows Vista Firewall and its refusal to go away? All our PCs are secured behind two firewalls: a hardware firewall and Microsoft ISA Server. The only traffic that gets in is the traffic that we want to get in. Now we can appreciate having the firewall on by default; but after turning it off over 20 times, it's getting to be too much."
Thread beginning with comment 214227
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE: Not Necessary!?
by Rugmonster on Sun 18th Feb 2007 22:02 UTC in reply to "Not Necessary!?"
Rugmonster
Member since:
2005-11-18

This was a mindset I argued against for years and somewhere along the way my arguments started to stick. The idea that you can do boundary protection and be done, is insane. Anyone having any control over security for an enterprise needs to realize that there is more to network security than border firewalls.

Reply Parent Bookmark Score: 5

RE[2]: Not Necessary!?
by mwadams on Mon 19th Feb 2007 00:18 in reply to "RE: Not Necessary!?"
mwadams Member since:
2006-06-13

I couldn't agree more. Rather like those corporations that "standardize" on exactly one vendor's Anti-Virus product. Just hope *you* don't get by the worm that silently avoids that particular flavor of protection...

Reply Parent Bookmark Score: 2

RE[3]: Not Necessary!?
by kaiwai on Mon 19th Feb 2007 04:49 in reply to "RE[2]: Not Necessary!?"
kaiwai Member since:
2005-07-06

The better way to avoid the virus issue is this; simply don't run McAfee or Nortons - and you won't have that problem.

For me, Kaspersky wins hands down everytime; its interface may not be exactly eye candy, but it does the job without bringing the whole thing down to crawl and crash the system.

Reply Parent Bookmark Score: 2

RE[2]: Not Necessary!?
by Fred on Mon 19th Feb 2007 12:01 in reply to "RE: Not Necessary!?"
Fred Member since:
2005-07-06

The problem with running client firewalls in an enterprise environment (most specifically a fully AD integrated Windows environment) requires so many ports open you can just as well turn the whole damn thing off as those are also the ports most trojans and viruses use.

Rigorous policies, a virus scanner on both client and server, no local admins and an very tight border security comes a long way in keeping crap outside.

Reply Parent Bookmark Score: 1