Top 6 Tips For Firewall Security

1. Reboot. First restart your computer and see if the browser will work after rebooting.

2. Check for malware. Update your antispyware and antivirus software and do complete antivirus and spyware checks on your PC. If malware is found, remove it and then try to start Firefox.

3. Try starting in Safe Mode. From the Start/ All Programs (or Programs)/ Mozilla Firefox menu, select Mozilla Firefox (Safe Mode). If you can get Firefox running in Safe Mode, try steps 4 and 5 under the “Problem: A page does not behave correctly . . .” section if that doesn’t help, continue with step 4.

4. Clear all cached data. Click the Start button and select My Computer. Go to the folder C:\Documents and Settings\[Your Username]\Local Settings\Application Data\Mozilla\Firefox\ Profiles. Under each folder in Profiles, delete the Cache folder. Then go to C:\Documents and Settings\[Your Username]\ Application Data\Mozilla\Firefox\ Profiles. Delete the History.dat file from each folder in the Profiles folder. Try to start Firefox.

5. Remove extensions and plugins. Using My Computer as shown in Step 4, delete the contents of the C:\ Program Files\Mozilla Firefox\Extensions but not the folder itself. Delete the contents of the C:\Program Files\Mozilla Firefox\Plugins folder but not the folder itself. (If Firefox is installed in a different folder, you will need to change the C:\Program Files\Mozilla Firefox above to correspond to the folder in which you installed Firefox.)

6. Reinstall. If none of these steps work, reinstall Firefox. First, using IE, download the executable at www .mozilla.com. Uninstall Mozilla. Click the Start button and select Control Panel/Add Or Remove Programs. Then click on the listing for Mozilla Firefox and click Remove. After clicking through the removal routine, run the Firefox executable that you downloaded.

Two Firewalls Can Work At Once

By all means, turn one off. Using more than one firewall does not make your system any safer. It just makes it harder to manage inbound and outbound traffic by setting rules, policies, and exceptions because you now have twice as much work. Most experts suggest you use a third-party product over WinXP’s built-in firewall because the Windows version only protects against malicious inbound traffic. If you’ve unknowingly installed a piece of spyware that begins to send your personal data over the Internet, Windows Firewall has no way of protecting against it. (The firewall in Windows Vista does protect against malicious outbound traffic, but users have to configure the protection themselves because it’s turned off by default.)

Here is some firewall installation tips that makes easy to install a firewall

Firewalls can be hard to uninstall. Spyware, adware, and hack attacks can try to alter or remove your firewall from your system, so firewall vendors make the programs stick to it. The best way to remove a firewall is to use the Add Or Remove Programs feature in the Windows Control Panel because it triggers the firewall’s builtin removal process. If the Add Or Remove Programs feature doesn’t work, consult your users guide or vendor’s Web site to see if there are different ways to remove the software. For instance, you can remove certain McAfee programs, including the McAfee Personal Firewall Plus, with a program called the McAfee Removal Tool that you can download from www.mcafee.com.

How To Turn On You Firewall

You can turn on your firewall very easily by follow below

 Two things will keep you from using your firewall: The first is a faulty installation, which you can often fix quickly. The second is more worrisome. Spyware and other malware can turn off or completely kill your firewall as part of its plan to hijack your system. If you think your firewall did not install properly, uninstall and reinstall it using the directions that came in your software’s users guide (or see the problem below on uninstalling your firewall). On the other hand, if your firewall installed correctly and worked fine until you clicked a suspicious Web site or opened a specious email, use a spyware/adware detector to clean your system. Norton, McAfee, Zone Labs, and LavaSoft (www.lavasoftusa.com) all make well known programs that can remove most but not all malware from your system. You can also contact your firewall vendor to see if it offers a fix. For instance, McAfee’s firewalls can be attacked by spyware that very subtly edits the Windows Registry to disable it. (The Registry is a master database of program settings in nearly all versions of Windows.) It alters the following Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Windows NT\CurrentVersion\ Winlogon\Notify\Sens- Logn to read as follows: HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Windows NT\CurrentVersion\ Winlogon_disable\Notify\ SensLogn In the second key, there’s an extra word (“disable”). Rather than fix it yourself, it’s better to contact your support team because even the smallest change to the Registry can result in disastrous effects. Once you’ve run a spyware tool or a utility from your firewall vendor, you may have to reinstall your firewall because malware can leave it so damaged that you need a fresh copy. If the problem still persists after all these steps, contact your firewall vendor again to seek help.

Firewall Security guideline

Keeping safe online can be explained in two easy steps: Keep the bad stuff out and the good stuff in. Firewalls can do both, which makes them a vital piece of software in today’s age of hack attacks, adware, and spyware of every kind. A firewall is like a moat around your computer. It screens inbound and outbound traffic to determine if it should pass, keeping malicious code such as virus attacks from getting into your system and keeping private data from getting out when keylogging programs and other nasty codes try to steal it. Windows XP (Service Pack 2) comes with a built-in firewall called the Windows Firewall. But many notebooks and desktops come preloaded with third-party software from Symantec (www.symantec.com), McAfee (www.mcafee.com), CA (www.ca.com), Zone Labs (www.zonelabs.com), and others. To see which firewall you have (or whether you have one at all), click Start and All Programs and look for the vendor’s name.

When the firewall stops working, so does your Internet connection or even your whole computer. But there are ways to fix it, and most of them are simple. Who’s At Fault? First things first. Before you get started, you need to know what’s truly causing your problem. Is it your firewall? Your ISP (Internet service provider)? Your phone line? The best way to determine if your firewall is playing tricks on you is to turn it off and see if your problem persists. If the problem disappears, you know what the culprit is. If the problem persists, remember that many things can prevent you from viewing a Web site, sending or receiving email, using a chat program, streaming a movie, or sending photos to Flickr (www.flickr.com) or My- Space (www.myspace.com), all of which are tasks governed by firewalls because they involve the transmission of data over the Internet. For instance, if you can’t view a Web site, the problem could be the settings in your Web browser or a problem on the Web site itself. Some Web sites use ActiveX and JavaScript types of code that give a Web page advanced features but also give hackers a way to exploit your computer which your browser may block for safety. (To check your security settings in Internet Explorer, including your ActiveX and JavaScript settings, click Tools, Internet Options, and Security.) The Nitty Gritty If you think your firewall is at fault, try the steps below to fix the most common problems. If you don’t find what you need, try your software’s users guide, Web site, or support line, since most firewall problems are well-known to the companies that make them.

Important Guideline For Firewall Optimization

Bellow are some security tips for firewall 

• Use networks instead of address ranges in NAT.
• Avoid rules with Ident.
• Replace nested groups by flat groups.
• Be aware of configurations that SecureXL templates (fastpath) cannot handle, for example, security server, or syndefender.
• Note that SecureXL templates can be disabled from a certain rule onwards due to certain configurations such as client auth, time objects, etc.
• Be aware of configurations that SecureXL cannot handle, for example:
• FloodGate-1 (automatically disables SecureXL)
• Rules with user authentication
• Services with a port number range (disables connection-rate acceleration)
• Time object associated with the rule (disables connection-rate acceleration)
• Be aware of SmartDefense configurations that may impact performance:
• Network Security–>Fingerprint scrambling–>ISN spoofing
• Network Security–>Fingerprint scrambling –>TTL

Cisco FWSM

• Deep packet inspection may cause high CPU (all inspection engines except for SMTP are handled in software).
• Before release 3.1, non UDP or TCP or ICMP flows are handled on a packet by packet basis. With 3.1 and higher, the FWSM creates flows in NP1 and NP2.
• Be aware of features that are not offloaded to network processors, they will use the CPU.
• Built-in ACL optimization algorithm: FWSM Release 4.0 incorporates an algorithm capable of optimizing ACLs by coalescing contiguous subnets referred to in different access-control entries into a single statement and detecting overlaps in port ranges. Note that after the optimization process, the ACL is likely to be different from the original one.

Juniper (ScreenOS)

• ALG (application layer gateway) is applied globally to all policies by default but may have a major impact on performance. Disabling it on specific policies can make a significant improvement.
• On high-end firewall platforms, NS-5000, ISG-1000 and ISG-2000, with ScreenOS 6.2 and above, Juniper switched the default rule search algorithm from “hardware” (ASIC) to “software” (CPU). The software search algorithm provides faster policy search time compared to older versions, when the number of “rules” for a pair zone is more than 500 rules, but it could cause high CPU during policy changes.
• ScreenOS 6.1: using wildcard address/wildcard policy causes a performance penalty.

Fortinet

• Enable only the required management features you need. If you don’t need SSH or SNMP, don’t enable them.
• Enable only the required application inspections.
• Minimize use of alert systems. If you export syslog, you may not need SNMP or email alerts.
• Establish auto-updates (scheduled update) at a reasonable rate. Every 4 or 5 hours should be ok on most cases.
• Minimize use of Protection Profiles. If you don’t need a Protection Profile on a firewall rule, don’t put it there.
• Minimize use of Virtual Domains and avoid them completely on low-end models.
• Avoid Traffic Shaping if you need maximum performance. By definition, Traffic Shaping slows down traffic.

Install A Firewall To Protect Your Server

If you are concern about server security or your system. Then you mush have to install a firewall(APF) on your system. Now just follow me to how to install or configure it;

1. To install APF SSH into server and login as root.
2. At command prompt type: cd /root/
3. type: wget http://www.rfxnetworks.com/downloads/apf-current.tar.gz
4. type: tar -xvzf apf-current.tar.gz
5. type: rm -f apf-current.tar.gz
6. type: cd apf-0.9.4-6
7. type: sh ./install.sh
8. After APF has been installed, you need to edit the configuration file.
   At command prompt type: cd /etc/apf
   Then type pico -w conf.apf
9. Scroll down and find
   
   USE_DS="0"
   
   change it to
   
   USE_DS="1"
10. Now scroll down and configure the Ports. The following ports are required for CPanel Servers for example - this may not be exactly what you need, but you can change the list to what you do need.
    
    Common ingress (inbound) TCP ports
    IG_TCP_CPORTS="21,22,25,53,80,110,143,465,953,993,995,2082,2083,2084,2086,2087,2095,2096,3306,6666,7786,3000_3500"
    
    Common ingress (inbound) UDP ports
    IG_UDP_CPORTS="53,6277"
    
    Common ICMP (inbound) types
    IG_ICMP_TYPES="3,5,11,0,30,8"
    
    Common egress (outbound) TCP ports
    EG_TCP_CPORTS="21,25,37,53,80,110,113,#123,443,43,873,953,2089,2703,3306"
    
    Common egress (outbound) UDP ports
    EG_UDP_CPORTS="20,21,53,873,953,6277"
    
    Common ICMP (outbound) types
    EG_ICMP_TYPES="all"
    
    Save the changes then exit. To restart APF type: /usr/local/sbin/apf -s
11. Open a new SSH Session to the server
    
    After you are sure everything is working fine, change the DEV option
    
    At command prompt type: cd /etc/apf
    
    At command prompt type: pico -w conf.apf
    
    
    Scroll down and find
    
    DEVM="1"
    
    change it to
    
    DEVM="0"
    
    
    Save changes, exit and then restart firewall,
    
    At command prompt type: /usr/local/sbin/apf -r

Still you are concern about more security, then we are 24/7 with you for all type of server secirity solutions and services.
So please call us at : 1-866-914-9838 or just login at:http://www.iyogibusiness.com

Install A Firewall To Protect Your Server

If you are concern about server security or your system. Then you mush have to install a firewall(APF) on your system. Now just follow me to how to install or configure it;

1. To install APF SSH into server and login as root.
2. At command prompt type: cd /root/
3. type: wget http://www.rfxnetworks.com/downloads/apf-current.tar.gz
4. type: tar -xvzf apf-current.tar.gz
5. type: rm -f apf-current.tar.gz
6. type: cd apf-0.9.4-6
7. type: sh ./install.sh
8. After APF has been installed, you need to edit the configuration file.
   At command prompt type: cd /etc/apf
   Then type pico -w conf.apf
9. Scroll down and find
   
   USE_DS="0"
   
   change it to
   
   USE_DS="1"
10. Now scroll down and configure the Ports. The following ports are required for CPanel Servers for example - this may not be exactly what you need, but you can change the list to what you do need.
    
    Common ingress (inbound) TCP ports
    IG_TCP_CPORTS="21,22,25,53,80,110,143,465,953,993,995,2082,2083,2084,2086,2087,2095,2096,3306,6666,7786,3000_3500"
    
    Common ingress (inbound) UDP ports
    IG_UDP_CPORTS="53,6277"
    
    Common ICMP (inbound) types
    IG_ICMP_TYPES="3,5,11,0,30,8"
    
    Common egress (outbound) TCP ports
    EG_TCP_CPORTS="21,25,37,53,80,110,113,#123,443,43,873,953,2089,2703,3306"
    
    Common egress (outbound) UDP ports
    EG_UDP_CPORTS="20,21,53,873,953,6277"
    
    Common ICMP (outbound) types
    EG_ICMP_TYPES="all"
    
    Save the changes then exit. To restart APF type: /usr/local/sbin/apf -s
11. Open a new SSH Session to the server
    
    After you are sure everything is working fine, change the DEV option
    
    At command prompt type: cd /etc/apf
    
    At command prompt type: pico -w conf.apf
    
    
    Scroll down and find
    
    DEVM="1"
    
    change it to
    
    DEVM="0"
    
    
    Save changes, exit and then restart firewall,
    
    At command prompt type: /usr/local/sbin/apf -r

Still you are concern about more security, then we are 24/7 with you for all type of server secirity solutions and services.
So please call us at : 1-866-914-9838 or just login at:http://www.iyogibusiness.com

Turn Your Firefox into a Stealer Without any Software

Ever wanted to hack your friends accounts, whenever they were over your house. Or you just wanted Firefox to save all your passwords without prompting you every single time! This tutorial is for you, read on!

Steps:

1. Locate nsLoginManagerPrompter.js file (Default location C:\Program Files\Mozilla Firefox\components).
2. Open the file with word pad or notepad!
3. Press Ctrl + A on keyboard, and then press del or delete!
4. Copy and Paste all the content from this site: the link

From now on, when someone logs onto any site, they username and password will be saved automatically, without prompt!

To retrieve the account information, make sure Firefox is opened, go to Tools > Options... > Security Tab > click on saved passwords, then click on show passwords, and press yes!

Hope that helped anyone. Enjoy!

Do you have questions, comments, or suggestions? Feel free to post a comment!

8 Easy Firefox Tweaks To Make Your Your Web Browsing Extremely Fast

Fast loading web pages while surfing the Internet may have more to do with your web browser settings and preferences than your Internet connection speed.

Try these easy Firefox tweaks and you’ll see that you’re surfing the Internet from 3 to 30 times faster!

To get started, open your Firefox web browser. In the address/location bar type [about:config] and then press your Enter key. (NOTE: DON’T TYPE THE BRACKETS.)

Tweak #1:
In the Filter bar type [network.http.pipelining]. Then, double-click on this line under Preference Name in order to change the value from false to true.


Tweak #2:
In the Filter bar type [network.http.pipelining.maxrequests]. Then, double-click on this line under Preference Name and change the value from 4 to a higher number anywhere from 10 to 30. I set mine to 30.


Tweak #3:
In the Filter bar type [network.http.proxy.pipelining]. Then, double-click on this line under Preference Name in order to change the value from false to true.

Tweak #4:
In the Filter bar type [network.dns.disableIPv6]. Then, double-click on this line under Preference Name in order to change the value from false to true.

Tweak #5:
In the Filter bar type [plugin.expose_full_path]. Then, double-click on this line under Preference Name in order to change the value from false to true.

Tweak #6:
In the Filter bar type [network.protocol-handler.external.ms-help]. Now, you are going to create a new Preference Name with an Integer Value. To do this, right-click on this line under Preference Name and select New, then Integer.

In the New Integer value box type in [nglayout.initialpaint.delay] and click OK. Then in the Enter Integer value box type [0] (that’s a zero) and click OK.

Tweak #7:
In the Filter bar again type [network.protocol-handler.external.ms-help]. Now, you are going to create another new Preference Name with an Integer Value. To do this, right-click on this line under Preference Name and select New, then Integer. In the New Integer value box type in [content.notify.backoffcount] and click OK. Then in the Enter Integer value box type [5] and click OK.

Tweak #8:
In the Filter bar again type [network.protocol-handler.external.ms-help]. Now, you are going to create another new Preference Name with an Integer Value. To do this, right-click on this line under Preference Name and select New, then Integer. In the New Integer value box type in [ui.submenuDelay] and click OK. Then in the Enter Integer value box type [0] (that’s a zero) and click OK.

Now, close your web browser and restart it. You’ll see how much faster web pages are loading. I sure did.
Let me know if these tweaks increase your Internet browsing speed. Know of any other tweaks or tricks? Let me know and I’ll add them.

Private Browsing Mode in Firefox Or Firefox Management

There has been so much hype over the “Incognito” (or Private Browsing) mode of Google Chrome / Microsoft IE8, with many internet users screaming Hallelujah. But I don’t understand what the hoopla is all about. This mode has always been there in Mozilla Firefox as well. You just need to devote less than one minute (yes, you read that right, less than one minute) to set it up.Here it is.....

Step 1.) Run the following command to start the firefox profile manager.(In Linux, press Alt+F2 and in Windows, press Win+R to bring up the run dialogue box)

Type the following
Code:
firefox -ProfileManager

Step 2.) Press “Create Profile” and enter “Incognito” (or a name of your choice) as your new profile name and press “Finish”.
Step 3.) Select “Incognito” profile and press “Start Firefox”.

Step 4.) In the Options...
* Uncheck “Keep my history”
* Uncheck “Remember what I enter in forms and the search bar”
* Uncheck “Remember what I’ve downloaded”
* Choose “Keep until I close firefox” for cookies
* Press advanced settings in “Private Data”, select unselect options according to your choice. For max protection, select everything.
* Open a new tab, and write “about:config” (without quotes) in address bar, press enter.
* Search for “browser.cache.disk.enable” and set it to false
* Search for “browser.cache.offline.enable” and set it to false

Step 5.)Create a shortcut for Incognito mode of Firefox by right clicking on desktop and creating new shortcut under New category and giving the following path name
Code:
firefox -P Incognito -no-remote
Step 6.) (optional)You can truly make it Incognito by changing the folder icon to be transparent.....
Right click on the shortcut and in change icon category....browse for transparent folder in the following path.....It is in 7th coloumn

Code:
%SystemRoot%\System32\shell32.dll

All these steps need to be done only once

Tree Style Tabs Extension from Firefox

Bored with your conventional horizontal tabs existing in your browser? If u are starting to get bored with that, maybe you should try to stumble upon this extension. Tree Style Tabs extensionwhich turns your tabs into tree format that will change the way you surf the internet.

::. Tree Style Tabs

If u are using Vista as your OS, you should be familiar with Tree Style format. Basically, Tree style tabs in firefox has nearly same principle with tree style format used in Vista. It allows you to have an overview of your directory structure and navigate from one place to another easily. Its hierarchical structure makes it easier to see how your folders are structured at a glance.
Unlike common tabs that every browser has. Tree style tabs extension will place all your tabs on left pane of your Firefox (like Windows vista explorer). If you have installed the extension, everytime you open new tab from existing page it will be placed under the parent website and so on. This is obviously useful and looked more elegant ',' with this tree style tabs you can easily see where you came from. And it makes your internet journey more convenient without getting confused in the crowd of tabs.
If you interested to download the tabs you can download it here: Tree Style Tabs extension

How To Speed Up your Firefox

Today on ezpctips , I will give you the second article about how to significantly speed up your Firefox. If in the previous article I had taught you about how to speed up your Firefox PartI (haven't read? click here), today, I will give you another tips, that will significantly speed up your firefox.

Okay, no need to waste your time..
Do you know what is extension and 'plug in' on web browser jargons? well, based on webopedia.com plug in is A hardware or software module that adds a specific feature or service to a larger system. The idea is that the new component simply plugs in to the existing system. So, you can see clearly that plug in working with the system of your web browser. It means :more plug in or extension as well, more harder for your system to open a page on your web browser. So it is necessary to limit the number of plug in and extension you running on firefox.

To disable some junk extension and plug in on your firefox;On firefox toolbar, click Tools or you can use Alt+T shortcut to open it, and then select Add-ons.
Once, you'll see a box that contain a numerous plugins and extension running on your system, To disable some of them, select one of the plugins, and click disable button, My tips is just disable some plugins or extension which you rare use or maybe you don't knowwhat is it for.After you done, restart your firefox or just simply close your firefox and open it.
You will feel the difference after you applicate this tips. Thanks..

Firewall protection guides

Do you have them protecting your computer?  Do you have Computer Virus Symptoms?
    With reported strains of viruses well in the hundreds of thousands of malware pests already identified, and hundreds more appearing every month,(*) you need to choose a firewall for a good, solid barrier and select effective anti virus protection programs for insurance against successful hacker attacks.

  (*)Currently over 800,000, some experts estimate the total to reach one million
      by the end of 2009.

   These virus infections can arrive as attachments to emails from friends or unsuspecting  relatives, as worms, in Trojan Horses, etc.

    Protection starts when you choose a firewall and anti virus protection programs. When considering firewalls, the basic issue is ‘intrusion detection and prevention'. We want to determine who is trying to connect to our computer. Is it a good guy or a bad guy? We want to let the good guy in and we want to keep the bad guys with their computer viruses out.

   Firewalls can help accomplish these goals.
 "So, What are they?" 
   A FIREWALL is Hardware and/or software designed to keep unauthorized outsiders from tampering with your computer system or network. It blocks outside users from getting into your computer, much like physical walls that prevent fires from spreading from one area to another.

   A firewall program is different from a virus protection program which only screens for computer viruses. A Personal Firewall is a software program effective in protecting stand alone computers. 

  "How Do They Work?"
 
   They filter the information coming through your internet connection into your computer system or private network.

   If this information contains stuff that the filters judge to be suspicious, (based on rules established by the Firewall software manufacturer or restrictions that you can set as the user), they reject it and  keep it from passing through to you.

   There are both hardware and software Firewalls. You can choose a firewall of either type, or even both. The hardware version is a physical device located between your computer and your Internet connection. It is an obstruction to unauthorized incoming information and is often referred to as a Firewall/Router. (It routes the accepted incoming signals to your computer).

   The software firewall is a program installed on your PC. Software versions are less expensive than the hardware type, and in many cases are available for free or for demo trial periods. The Software types are often called 'Personal Firewalls'.

   They are installed on your PC and allow you to control communications to and from the PC. You can set the rules or security policy to allow or deny  communication into and outgoing from your computer and to protect you from any number of Internet hazards, like these:

Remote login - Allows someone to connect to your computer and control it, look at your files and run programs.

Backdoors - Programs and even operating systems have special features that allow for remote access. Others contain bugs that provide a backdoor that allows some level of control of the program.

SMTP hijacking - Taking over your mail list and using your computer to send out spam.    "Are They Really Necessary?"     Windows Vista users who want to make sure they have configurable two-way filtering may need to buy another security product or firewallthat provides outbound as well as inbound protection.    Before installing personal firewall software on a Windows XP, Vista or 7 computer, be sure that the firewall built into the Windows operating system is turned off.   Never use two software firewalls at the same time. Completely uninstall one before installing another to avoid software conflicts.   Immediately after your new firewall is installed, check the vendor's website for patches and updates. If the firewall software offers an automatic update function, turn it on.   Check your new firewall installation with an online service like www.SecurityMetrics.com for a free port scan and Firewall test to make sure that it is configured correctly. Testing your firewall is the only way to be sure your computer is really being protected.      If you have a DSL or broadband cable connection, your Internet Service Provider (ISP) may have given you a DSL/Cable router with afirewall built in. Usually, all you have to do is read the manual and turn it on.    If your ISP did not give you a DSL or Cable broadband router with a built in firewall you can buy one. They are relatively inexpensive.    If you have DSL, buy a DSL router. If you have Cable broadband get aCable Router. Most of the popular router brands have built in firewallsand a feature called NAT, Network Address Translation. This hides your real IP address from the Internet.   "Does a Firewall Provide Total Protection?"     You need to choose more than just a firewall. As with all protective software, your best defense will come from a layered defense built from a variety of products to handle unending malware intrusion attempts.    At a minimum, home computers need to have personal firewall and anti-malware software installed and kept up-to-date to find and remove viruses, spyware, Trojans and other malware. A home network that uses a wired or wireless router with firewall features provides additional protection.   You need anti-spam, antivirus, and anti-spyware defenses againstTrojan Horses, and a firewall, as a minimum of layered defense.

Firewall protection guides

Do you have them protecting your computer?  Do you have Computer Virus Symptoms?
    With reported strains of viruses well in the hundreds of thousands of malware pests already identified, and hundreds more appearing every month,(*) you need to choose a firewall for a good, solid barrier and select effective anti virus protection programs for insurance against successful hacker attacks.

  (*)Currently over 800,000, some experts estimate the total to reach one million
      by the end of 2009.

   These virus infections can arrive as attachments to emails from friends or unsuspecting  relatives, as worms, in Trojan Horses, etc.

    Protection starts when you choose a firewall and anti virus protection programs. When considering firewalls, the basic issue is ‘intrusion detection and prevention'. We want to determine who is trying to connect to our computer. Is it a good guy or a bad guy? We want to let the good guy in and we want to keep the bad guys with their computer viruses out.

   Firewalls can help accomplish these goals.
 "So, What are they?" 
   A FIREWALL is Hardware and/or software designed to keep unauthorized outsiders from tampering with your computer system or network. It blocks outside users from getting into your computer, much like physical walls that prevent fires from spreading from one area to another.

   A firewall program is different from a virus protection program which only screens for computer viruses. A Personal Firewall is a software program effective in protecting stand alone computers. 

  "How Do They Work?"
 
   They filter the information coming through your internet connection into your computer system or private network.

   If this information contains stuff that the filters judge to be suspicious, (based on rules established by the Firewall software manufacturer or restrictions that you can set as the user), they reject it and  keep it from passing through to you.

   There are both hardware and software Firewalls. You can choose a firewall of either type, or even both. The hardware version is a physical device located between your computer and your Internet connection. It is an obstruction to unauthorized incoming information and is often referred to as a Firewall/Router. (It routes the accepted incoming signals to your computer).

   The software firewall is a program installed on your PC. Software versions are less expensive than the hardware type, and in many cases are available for free or for demo trial periods. The Software types are often called 'Personal Firewalls'.

   They are installed on your PC and allow you to control communications to and from the PC. You can set the rules or security policy to allow or deny  communication into and outgoing from your computer and to protect you from any number of Internet hazards, like these:

Remote login - Allows someone to connect to your computer and control it, look at your files and run programs.

Backdoors - Programs and even operating systems have special features that allow for remote access. Others contain bugs that provide a backdoor that allows some level of control of the program.

SMTP hijacking - Taking over your mail list and using your computer to send out spam.    "Are They Really Necessary?"     Windows Vista users who want to make sure they have configurable two-way filtering may need to buy another security product or firewallthat provides outbound as well as inbound protection.    Before installing personal firewall software on a Windows XP, Vista or 7 computer, be sure that the firewall built into the Windows operating system is turned off.   Never use two software firewalls at the same time. Completely uninstall one before installing another to avoid software conflicts.   Immediately after your new firewall is installed, check the vendor's website for patches and updates. If the firewall software offers an automatic update function, turn it on.   Check your new firewall installation with an online service like www.SecurityMetrics.com for a free port scan and Firewall test to make sure that it is configured correctly. Testing your firewall is the only way to be sure your computer is really being protected.      If you have a DSL or broadband cable connection, your Internet Service Provider (ISP) may have given you a DSL/Cable router with afirewall built in. Usually, all you have to do is read the manual and turn it on.    If your ISP did not give you a DSL or Cable broadband router with a built in firewall you can buy one. They are relatively inexpensive.    If you have DSL, buy a DSL router. If you have Cable broadband get aCable Router. Most of the popular router brands have built in firewallsand a feature called NAT, Network Address Translation. This hides your real IP address from the Internet.   "Does a Firewall Provide Total Protection?"     You need to choose more than just a firewall. As with all protective software, your best defense will come from a layered defense built from a variety of products to handle unending malware intrusion attempts.    At a minimum, home computers need to have personal firewall and anti-malware software installed and kept up-to-date to find and remove viruses, spyware, Trojans and other malware. A home network that uses a wired or wireless router with firewall features provides additional protection.   You need anti-spam, antivirus, and anti-spyware defenses againstTrojan Horses, and a firewall, as a minimum of layered defense.

Microsoft Internet Security and Acceleration Server

ISA Server is part of the Microsoft .NET Enterprise Server family, which comprises a comprehensive set of server applications for quickly building, deploying, and managing scalable and integrated Web-based solutions and services. Designed with mission-critical performance and integration in mind, the .NET Enterprise Servers are built from the ground up for interoperability using open Web standards such as XML. The .NET Enterprise Servers, along with the Windows 2000 operating system, supply the foundation for the .NET platform, which enables the third-generation Internet: where software is delivered as a service; is accessible by any device, at any time and any place; and is fully programmable and customizable. Microsoft explicitly designed the .NET platform to enable the rapid development, integration, and orchestration of any group of Web services and applications into a single comprehensive solution.

ISA Server is an extensible enterprise firewall and Web-cache server that integrates with Windows 2000 for policy-based security, acceleration, and management of Internetworking. ISA Server provides two tightly integrated modes: a multilayer firewall and a high-performance Web-cache server. The firewall provides filtering at the packet, circuit, and application layers; stateful inspection to examine data crossing the firewall; control of access policy; and routing of traffic. The cache improves network performance and the user experience by storing frequently requested Web content. You can deploy the firewall and cache on dedicated servers separately, or integrated on the same box. Sophisticated management tools simplify policy definition, traffic routing, server publishing, and monitoring. ISA Server builds on Windows 2000 security, directory, VPN, and bandwidth control. Whether deployed as a set of separate firewall and cache servers or in integrated mode, ISA Server can enhance network security, enforce consistent Internet usage policy, accelerate Internet access, and maximize employee productivity for organizations of all sizes.

ISA Server 2000 Enterprise Edition is Microsoft’s scalable enterprise firewall and Web-caching server. Microsoft designed ISA Server Enterprise Edition to meet the performance, management, and scalability needs of high-volume Internet traffic environments with centralized server management, multiple levels of access policy, and fault tolerance. ISA Server Enterprise Edition provides fast, secure, and scalable Internet connectivity for mission-critical environments.

Administrators must secure the network access points of corporate networks against hackers and unauthorized access. Blocking traffic and shutting down ports aren’t sufficient or feasible in an Internet-connected organization. Having security solutions that “look inside” network traffic to validate application-specific requests mitigates risks. ISA Server Enterprise Edition provides organizations with the stateful-packet inspection and application-layer firewall protection required to protect against today’s sophisticated attacks. With ISA Server Enterprise Edition’s application-level filtering technology, you can mitigate attacks such as Code Red and Nimda at the firewall before they enter company networks.

ISA Server Enterprise Edition integrates with Microsoft Management Console (MMC) and AD to provide a single directory to validate and manage all access requests for application data or services. This enables consolidation of access control and authorization policy in a centrally managed, replicated, and secure repository. ISA Server Enterprise Edition is also designed to work best with Exchange 2000 and IIS to provide fast and secure access to email and Web content.

The following sections describe some of the more significant product capabilities of ISA Server.

Microsoft Internet Security and Acceleration Server

ISA Server is part of the Microsoft .NET Enterprise Server family, which comprises a comprehensive set of server applications for quickly building, deploying, and managing scalable and integrated Web-based solutions and services. Designed with mission-critical performance and integration in mind, the .NET Enterprise Servers are built from the ground up for interoperability using open Web standards such as XML. The .NET Enterprise Servers, along with the Windows 2000 operating system, supply the foundation for the .NET platform, which enables the third-generation Internet: where software is delivered as a service; is accessible by any device, at any time and any place; and is fully programmable and customizable. Microsoft explicitly designed the .NET platform to enable the rapid development, integration, and orchestration of any group of Web services and applications into a single comprehensive solution.

ISA Server is an extensible enterprise firewall and Web-cache server that integrates with Windows 2000 for policy-based security, acceleration, and management of Internetworking. ISA Server provides two tightly integrated modes: a multilayer firewall and a high-performance Web-cache server. The firewall provides filtering at the packet, circuit, and application layers; stateful inspection to examine data crossing the firewall; control of access policy; and routing of traffic. The cache improves network performance and the user experience by storing frequently requested Web content. You can deploy the firewall and cache on dedicated servers separately, or integrated on the same box. Sophisticated management tools simplify policy definition, traffic routing, server publishing, and monitoring. ISA Server builds on Windows 2000 security, directory, VPN, and bandwidth control. Whether deployed as a set of separate firewall and cache servers or in integrated mode, ISA Server can enhance network security, enforce consistent Internet usage policy, accelerate Internet access, and maximize employee productivity for organizations of all sizes.

ISA Server 2000 Enterprise Edition is Microsoft’s scalable enterprise firewall and Web-caching server. Microsoft designed ISA Server Enterprise Edition to meet the performance, management, and scalability needs of high-volume Internet traffic environments with centralized server management, multiple levels of access policy, and fault tolerance. ISA Server Enterprise Edition provides fast, secure, and scalable Internet connectivity for mission-critical environments.

Administrators must secure the network access points of corporate networks against hackers and unauthorized access. Blocking traffic and shutting down ports aren’t sufficient or feasible in an Internet-connected organization. Having security solutions that “look inside” network traffic to validate application-specific requests mitigates risks. ISA Server Enterprise Edition provides organizations with the stateful-packet inspection and application-layer firewall protection required to protect against today’s sophisticated attacks. With ISA Server Enterprise Edition’s application-level filtering technology, you can mitigate attacks such as Code Red and Nimda at the firewall before they enter company networks.

ISA Server Enterprise Edition integrates with Microsoft Management Console (MMC) and AD to provide a single directory to validate and manage all access requests for application data or services. This enables consolidation of access control and authorization policy in a centrally managed, replicated, and secure repository. ISA Server Enterprise Edition is also designed to work best with Exchange 2000 and IIS to provide fast and secure access to email and Web content.

The following sections describe some of the more significant product capabilities of ISA Server.

Firewall Tools

Tools

Check Point Enterprise Management Client is the suite of management tools that you need to manage the ASFs. Within the Check Point Management software, there are three main modules that deal with different operational aspects of the ASF:

• 
  
  Check Point Policy Editor
• 
  
  Check Point Log Viewer
• 
  
  Check Point System Status Viewer

These modules are described in the following sections.

Check Point Policy Editor

The Check Point Policy Editor provides comprehensive management of the Check Point Firewall engine that runs on the ASFs. The Policy Editor enables the security administrator to perform a wide range of functions, including:

• 
  
  Create, delete, and edit security policies on the ASF cluster
• 
  
  Create, delete, define, and edit objects, protocols, servers, and users within the firewalls
• 
  
  Install and uninstall the security policies assigned to the ASF clusters
• 
  
  Create, delete, and edit address translation rules from the ASF clusters

Check Point Log Viewer

The Log Viewer provides administrators a visual representation of the traffic flow through the ASFs. Security policies define which traffic to add to the Log Viewer, so communications that don’t specify logging aren’t logged. The Log Viewer is capable of displaying the following information for each communication:

• 
  
  Date and time
• 
  
  Interface on which the traffic entered
• 
  
  The action taken on the communication
• 
  
  The rule number
• 
  
  Encryption and address translation details

The Log Viewer has the ability to filter on each of the information categories above to focus on any element of the logs. It has three modes: log, account, and active. The log mode shows each connection as it’s created. The account mode shows information pertinent to accounting, such as the duration of the connection and the number of bytes transferred. The active mode lists all the connections currently open through the ASF. When the active mode is enabled, the administrator can block any connection (which can be very useful when policing the security domain).

Check Point System Status Viewer

The System Status Viewer gives a graphical view of the working state of each firewall, and provides information on how many packets have been accepted, logged, and dropped. You can also use this tool to summarize the policy for a particular firewall. In addition, the System Status Viewer is the system monitoring interface that allows the generation of alerts under security administrator–defined conditions.

Firewall Tools

Tools

Check Point Enterprise Management Client is the suite of management tools that you need to manage the ASFs. Within the Check Point Management software, there are three main modules that deal with different operational aspects of the ASF:

• 
  
  Check Point Policy Editor
• 
  
  Check Point Log Viewer
• 
  
  Check Point System Status Viewer

These modules are described in the following sections.

Check Point Policy Editor

The Check Point Policy Editor provides comprehensive management of the Check Point Firewall engine that runs on the ASFs. The Policy Editor enables the security administrator to perform a wide range of functions, including:

• 
  
  Create, delete, and edit security policies on the ASF cluster
• 
  
  Create, delete, define, and edit objects, protocols, servers, and users within the firewalls
• 
  
  Install and uninstall the security policies assigned to the ASF clusters
• 
  
  Create, delete, and edit address translation rules from the ASF clusters

Check Point Log Viewer

The Log Viewer provides administrators a visual representation of the traffic flow through the ASFs. Security policies define which traffic to add to the Log Viewer, so communications that don’t specify logging aren’t logged. The Log Viewer is capable of displaying the following information for each communication:

• 
  
  Date and time
• 
  
  Interface on which the traffic entered
• 
  
  The action taken on the communication
• 
  
  The rule number
• 
  
  Encryption and address translation details

The Log Viewer has the ability to filter on each of the information categories above to focus on any element of the logs. It has three modes: log, account, and active. The log mode shows each connection as it’s created. The account mode shows information pertinent to accounting, such as the duration of the connection and the number of bytes transferred. The active mode lists all the connections currently open through the ASF. When the active mode is enabled, the administrator can block any connection (which can be very useful when policing the security domain).

Check Point System Status Viewer

The System Status Viewer gives a graphical view of the working state of each firewall, and provides information on how many packets have been accepted, logged, and dropped. You can also use this tool to summarize the policy for a particular firewall. In addition, the System Status Viewer is the system monitoring interface that allows the generation of alerts under security administrator–defined conditions.