How to select a Server software firewall (1)

"Guide" many users in the use of the server process will have a question: The server system running on what kind of firewall software effect is better, today, we have mastered the information, for you to introduce the current more suitable for the use of the firewall software server.

First of all, the server will generally have two ways to use, one is hosted server, or in the IDC rented server, at this time the need for a stand-alone firewall; the other is the company's local area network server, which is generally used as a bridgehead for network exports, to protect the security of the entire local area network, Use a dedicated gateway firewall at this point.

In addition, the different operating systems used by the firewall is certainly not the same, the current mainstream operating system is, of course, Windows and Linux, the following we follow the two types of operating systems for a few more recommended firewall software to introduce:

Server stand-alone Firewall

There are a number of Windows stand-alone firewalls that are currently popular, such as Sygate Personal Firewall Pro, BlackICE Server Edition, Zone Alarm, Norton Personal Firewall, Panda Platinum Internet Security, Netpatrol, Tiny Firewall Pro, Agnitum Outpost Firewall Pro, McAfee Personal Firewall, Kerio Server firewall, Kerio Personal Firewall, and so on.

Sygate Personal Firewall Pro, Netpatrol and tiny pro because the function is too powerful, in the use of the server must be a reasonable preconfigured, otherwise users may not be able to access the network to your server; Panda Platinum Internet Security, McAfee Personal Firewall, and Norton Personal Firewall, Norton is the worst, but they all belong to a relatively large firewall, Expensive system resources are not recommended, Kerio Personal Firewall, Zone Alarm and Agnitum Outpost Pro are more suitable for personal use, do server firewall bad;

Kerio Server firewall is based on B/S to control, this may have its advantages, but it is not as convenient to use as other. The rest is BlackICE Server Edition, it is the design of the better firewall software, but there is a lack of application layer filtering is relatively simple, and the general packet filtering is not much different (other firewall functions are similar, are not strong enough, in addition to Sygate Personal Firewall Pro, Netpatrol and Tiny firewall pro).

Some domestic developers have launched a dedicated server firewall software, although many are from the home version, personal version of the upgrade to the conversion, such as the famous Skynet laboratory developed Skynet Firewall Server version, but because of its personal version of the use of the filter monitoring mechanism itself is relatively excellent and easy to use, So the appropriate modification is also very suitable for server stand-alone applications, the most important of course, these software use Chinese interface, for some English is not very strong management staff to use or more cordial.

Windows system: BlackICE Server Protection

From the user's point of view, the following several stand-alone version of the firewall is more suitable for users with IDC server.

BlackICE Server Protection

function Introduction:

BlackICE Server Protection is a well-known intrusion detection system from ISS security, with powerful detection, analysis, and protection capabilities, and is easy to use to detect who is sweeping your port and intercepting it before attacking our computer. Protect our computer from bullying, can collect the IP address of the bully, computer name-network system address, hardware address-mac address, have log for us to view! As a server network firewall, is definitely your first choice!

BlackICE Software once won the Technical Excellence Award for PC Magazine, the expert commented on it: "For the home users without firewalls, BlackICE is an indispensable line of defense, and for the corporate network, it adds a layer of protection-it is not to replace the firewall, Instead, it blocks intruders who attempt to cross the firewall. BlackICE Integration has a very powerful detection and analysis engine, can identify more than 200 kinds of intrusion techniques, to give you comprehensive network detection and system protection, it can also real-time monitoring network ports and protocols, interception of all suspected network intrusion, no matter how the hacker's ability to do their best to harm your system.

It can also record the NetBIOS (WINS) name, DNS name, or IP address of the hacker you are trying to hack in order to take further action. After the use of the feeling, the software's sensitivity and accuracy is very high, stability is also very good, the system resource occupancy rate is very small, is the best choice for every friend on the Internet.