Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Desktop Firewalls: Page 2 of 4

Once the firewall is in place, you need to decide how much information the end user should receive. Should he or she receive alerts on all possible attacks--and be inundated with information--or should he or she be left in the dark?

Some firewalls send out alerts simply to show they're functioning. For example, a ZoneLabs ZoneAlarm firewall I once used told me my router was trying to ping my machine. Well, hot damn, glad that security breach was averted! On college campuses, copious alerts can lead to equally copious phone calls from students making accusations like "Your SNMP-based network-management software just hacked my AOL account!" A good rule of thumb is to limit user notifications to serious threats.

Two other considerations: Most enterprise-class firewalls require a database for log files. Do you have licenses and experts in MS SQL or Oracle? Will you need a separate database server, or can you run the database on the policy server?

Also, pricing varies widely. Most vendors charge on a sliding scale and offer discounts for bulk buys. You may have to pay extra for a management server, too. And you'll need to budget resources for maintenance, user training and support.

Application Control