Kerio Personal Firewall

[Stalemate]

Is anyone using it?

I'm looking for honest opinions on this <a href="http://www.kerio.com/us/kpf_home.html" target="_blank">free firewall</a>.

[ilovetheusers]

30 day trial only. Bah. I'd DL it and try but I'm behind a NAT and have yet to see a single attack come through. Sorry.

Zone alarm looks like it does the same thing so I'd say stick with that.

[Chris_MacMahon]

i did download it, but can't get it to run...so i don't know...am reading about outpost firewall from <a href="http://www.agnitum.com....seems" target="_blank">www.agnitum.com</a>
out post looks nice...

[Stalemate]

Thanks for the opinions guys.

I think I'll take a gander at Outpost as well, just because I want to experiment with something different. <img border="0" title="" alt="[Wink]" src="wink.gif" />

BTW, ILTU, doesn't the 30-day eval apply only to professional/commercial users? I recall seeing a mention that it was free for home/personal use?

[-Senectus-]

How did you go with that firewall software..
I've been playing with a firends copy of ZoneAlarm Pro, If you not carefull with that gear it completely breaks any access to the network and vice versa..

[MaddMaxx]

Kerio free firewall is good stuff. I used Tiny
Personal then they were purchased by Kerio. Kerio
has done a great job since and had about three
upgrades which all worked well. I use it for
clients also. Just ran an internet test flawlessly
at pcflank.com which checks about everything you
can check. Kerio wins!

[Garak]

Im testing them all -

Sygate never using that crap again
Zonealarm - pain in the a$$ to set up
Norton - hogs my resources

[Stalemate]

I'm fooling around with Outpost right now, but it's a tad more complex to set up that I expected (as in, I'll have to read the manual to figure it out ).

MaddMaxx's comments have got me intrigued now.

I'd sworn off Tiny because it ad caused me to re-install Windows - twice - before I figured out it was the culprit killing my TCP/IP stack.

It may be worth a closer look today then.

[Poseidon]

I just removed Outpost from 4 of our systems. Been trying it for nearly 30 days.

I liked the interface - more professional than ZA Pro

Program kept crashing though - all four machines different conditions etc. So I decided against buying it.

I am about to evaluate <a href="http://soho.sygate.com/products/pspf_ov.htm" target="_blank">Sygate Personal Firewall Pro</a>

edit: just read Garak's post. What were some of the problems you encountered with Sygate?

[Garak]

</font><blockquote><font size="1" face="Trebuchet MS, Verdana, Arial, Helvetica, sans-serif">quote:</font><hr /><font size="2" face="Trebuchet MS, Verdana, Arial, Helvetica, sans-serif">Originally posted by Poseidon:
<strong>
I am about to evaluate <a href="http://soho.sygate.com/products/pspf_ov.htm" target="_blank">Sygate Personal Firewall Pro</a>

edit: just read Garak's post. What were some of the problems you encountered with Sygate?</strong></font><hr /></blockquote><font size="2" face="Trebuchet MS, Verdana, Arial, Helvetica, sans-serif">It doesn't work - i went to a relatives and "hit" my pc - got through everytime.. but that was using Default settings - supposed to block and open ports that applications wherent using... maybe you will have better luck, I don't have much luck with firewalls,

[-Senectus-]

I got rid of ZAP, didn't like it much.
I'm trialling kerio now.. seems ok, I wish they would give a little more info on requests though...

I'm running it on my home server, win2k server using ICS with a adsl link, works fine for me so far..
Adept/others how has you Kerio experiance been?

[AKautz]

I came across <a href="http://www.sygate.com/alerts/Outbound-Blocking.htm" target="_blank">an article</a> at Sygate's web site, describing a security vulnerability (which Sygate's Personal Firewall Pro v5.0 apparently fixes) whereby "malicious programs can use trusted applications or their own TCP/IP stack to evade personal firewalls." After reading this, I went to Agnitum's site to see if this problem had been addressed in Outpost, which led me to <a href="http://www.agnitum.com/forum/showthread.php?s=4021287ca6337b1e05b2c641134ffe23& threadid=4020&highlight=outbound" target="_blank">a thread</a> on their site in which one user reported the results of a <a href="http://www.pcflank.com/art21.htm" target="_blank">five part "leak test"</a> conducted by <a href="http://www.pcflank.com" target="_blank">PC Flank</a>, in which Outpost was only able to pass two out of five leak tests.

Only one firewall called <a href="http://www.soft4ever.com/" target="_blank">Look 'n' Stop</a> (which I cannot recall hearing about until I saw this test), was able to pass all five leak tests used by PC Flank, which was followed by Sygate Pro 5.0 and Zone Alarm Pro 3.0.091 which were able to pass four out of five leak tests.

---------------

...Jews ask for signs, Greeks seek after wisdom, but we preach Christ [the Word of God that was made flesh (AKA the Son of God)] crucified; a stumbling block to Jews, and foolishness to Greeks, but to those who are called, both Jews and Greeks, Christ is the power of God and the wisdom of God. (The Holy Bible, the book of 1st Corinthians, chapter 1, verses 22-23, <a href="http://ebible.org" target="_blank">WEB translation</a>)

[Stalemate]

I finally got around to installing Kerio last night.

First impression: Very nice.

I like the interface and relative user-friendliness. I had been looking for something that could give me control similar to Checkpoint's Firewall1 and I think this is it.

[Stalemate]

GRC.com gives my system covered by Kerio Firewall a full "stealth" rating. No services/ports accessible.

Leaktest also failed to connect out to the Internet.

So far, so good.

Edit: PCFlank Tests

Quick Test
Reported only port 80 open (as I have it set up) and lack of complete browser privacy (using IE6, go figure. )

Stealth Test
Packet' type Status
======== =======
TCP "ping" stealthed
TCP NULL stealthed
TCP FIN stealthed
TCP XMAS stealthed
UDP stealthed

Recommendation:

Your computer is invisible to the others on the Internet!

Browser Test
Cookies and referrer tests failed (with IE6? never! )

TrojansTest
Trojan: Port Status
===== ===== ========
GiFt 123 stealthed
Infector 146 stealthed
RTB666 623 stealthed
Net-Devil 901 stealthed
Net-Devil 902 stealthed
Net-Devil 903 stealthed
Subseven 1243 stealthed
Duddies Trojan 1560 stealthed
Duddies Trojan 2001 stealthed
Duddies Trojan 2002 stealthed
Theef 2800 stealthed
Theef 3000 stealthed
Theef 3700 stealthed
Optix 5151 stealthed
Subseven 6776 stealthed
Theef 7000 stealthed
Phoenix II 7410 stealthed
Ghost 9696 stealthed
GiFt 10100 stealthed
Host Control 10528 stealthed
Host Control 11051 stealthed
NetBus 12345 stealthed
NetBus 12346 stealthed
BioNet 12348 stealthed
BioNet 12349 stealthed
Host Control 15094 stealthed
Infector 17569 stealthed
NetBus 20034 stealthed
MoonPie 25685 stealthed
MoonPie 25686 stealthed
Subseven 27374 stealthed
BO 31337 stealthed
Infector 34763 stealthed
Infector 35000 stealthed

Advanced Port Scan - Standard (typical)
Port 80 open

Advanced Port Scan - Syn (typical)
Port 80 open

Exploits Test (all)
Passed


Not too bad.

[Chris_MacMahon]

it looks like kerio is down right now....i'll try to get it later to play with....reinstalled my os and have nothing running right now...worth a shot...