Re: Personal Firewall Recommendation

Lars M. Hansen <[EMAIL PROTECTED]> wrote in 
news:[EMAIL PROTECTED]:

> There is no "right" or "wrong". The fact that you personally dislike
> ZoneAlarm is irrelevant. It's a desktop firewall, it does the job, and
> it doesn't require a network engineer in the drivers seat...
> 

Interestingly, Lars, a discussion came up in another newsgroup regarding 
Kerio, Zone Alarm and Sygate.

A newbie user wondered why it took 30 seconds to connect to his POP3 server 
when using Kerio, but connected immeditaely when using the other 2.

It was explained to him that Sygate and ZA automatically allow the port 113 
IDENT response from the server, while Kerio does not. A rule has to be 
written.

To a newbie user, this would look like a nice automatic feature.

To an experienced firewall user who wants complete control, this would look 
like a dumbing down of the firewall to accomodate newbie users who do not 
know how to write rules.

So, there you go - apples and oranges.