To: Finally who wrote (2061 ) 8/26/1998 12:15:00 AM From: mchip Read Replies (1) | Respond to of 2616
What will happen to CYBG from here?? I thought it might bounce back but after reading this article from the Aug 25th issue of LanTimes, Coming in second to last in a field of 8... Ouch! makes me think I should not have covered at 1 3/4! Nothing good said in the article, quite negitive actually. Anyone know if they have a newer version in the works? Looks like they need something and quick.lantimes.com registration required.. but free. CyberGuard Firewall for Windows NT 4.1 Price: $3,245, 50 users; $9,995, unlimited users Score: 2.8 CyberGuard Corp. Firewall for Windows NT is one of the old standards of NT-based firewalling, and its age is unfortunately starting to show. CyberGuard starts off with real promise, letting you simply pick and choose how you would like to disable or reconfigure Windows NT services during installation. But once the firewall is up and running, the application's ease of use goes out the window. The interface is perhaps best described as clunky and scattered, feeling very much like a bad Windows 3.1 crossover that's floundering in the more streamlined days of Windows NT 4.0. Setting up your configuration rules is not much more advanced than editing a large text file, requiring you to manually insert lines into a pre-built and commented file. You don't actually have to type the lines from scratch, but you will not find the user experience much better than if you actually did. If you're a security expert, this text file approach probably will not bother you much. Nonetheless, it's certainly one of the least sophisticated interfaces that we've come across, and it introduces an unacceptable likelihood of making a mistake during configuration. We also experienced several errors during the update process. For example, when inputting a maximum interval for the system to detect successive system log overrun attacks, the application continuously asked for us to enter a value. Eventually, we had to disable this form of protection altogether to continue. Sure enough, when we ran our security tests, we found CyberGuard vulnerable to this form of attack (the 2GB disk recommendation is there for a reason). We also found vulnerabilities to TCP sequence prediction, SYN floods, and data storms. Apparently, although CyberGuard lets you detect disk overrun attacks, it doesn't let you do anything about them. How this product achieved the usually quite stringent ICSA certification is a mystery. How slow can a firewall be? CyberGuard was far and away the slowest firewall in this comparison, completing our file transfer tests in more than an hour, almost eight times slower than baseline of 0:08:36, and almost twice as slow as its nearest competitor. In fact, everything about CyberGuard is pokey, including routine updates and system checks. The application has what would be a convenient Alert Summary screen, although it shows you only bare-bones information on a scant number of attack patterns (see screen shot, above, for an example of how useless an alert monitor screen can be). Although the firewall has a few extra features, such as authentication, log filtering, and advanced alerting via pager and SNMP traps, CyberGuard does not do a good enough job at its core function--stopping hostile traffic--to justify its implementation. We recommend you look elsewhere for your firewall solution.