The firewall's seven-step configuration wizard covers nearly all the security bases. With WinRoute, the barriers to learning are far smaller. In testing some UTM appliances such as Astaro's Security Gateway 110 and Untangle Professional, I've had to comb through several nonintuitive panes to create policies, and to adjust network-bandwidth settings I've had to delve deep inside QoS features. I found the software extremely easy to understand and navigate, in part because most features are readily accessible, not buried deep inside menus. For an extra $100, you can get McAfee's reasonably good antivirus engine, but you're also free to use AVG, Clam AntiVirus, Symantec's Scan Engine, or other AV utilities the firewall supports. ISS screens out URLs based on predefined categories. WinRoute includes IBM's decent Proventia content-filtering engine and the highly flexible OrangeWeb Filter module (from ISS), which enables the firewall to accept or block URLs based on content. RADIUS and LDAP sign-on services, as well as data access ports and a variety of protocols and services such as peer-to-peer (P2P), are turned off by default. The feature looks at the packets that pass through the firewall, making real-time determinations about permitting HTTP requests and checking the content, such as URLs and other metadata, for violations of content-filtering rules. The protocol inspector examines HTTP, FTP, POP3, SMTP, and other common protocols. The policy module focuses on control of the networking elements related to the end user, such as HTML objects and bandwidth, but you can also create policies for ports. The firewall's user-access and traffic policies, which manage port blocking, are simple to configure but offer powerful, granular control that lets administrators do fine-tuning to meet stringent network restrictions.
0 kommentar(er)
