| OVERVIEW
FirewallNow! Small Business
Edition for Windows NT, Windows 2000, Windows XP and Windows 2003
is the perfect solution for companies looking to protect and secure
their servers from the threats of malicious hackers and intruders
from the Internet. A must have for any server that has Internet
access. For companies already have hardware firewalls, FirewallNow!
provides additional anti-Trojan protection. An indispensable tool
for any servers where data security is important.
With FirewallNow! intruders
will be stopped dead in their tracks. Trojans, zombies and viruses
can hijack your server and turn it into a launching platform for
distribution of any data. A corporate firewall cannot differentiate
between the valid applications in the server and the malicious ones.
By utilizing legal ports, malicious Trojans/zombies/viruses/worms
gets a free ride on your server. FirewallNow! brings an end to these
nuisance codes by identifying valid applications in the servers
and monitoring in multiple layers.
FirewallNow! only protects
your server and that is where protection matter most.
MAIN FEATURES:
Intrusion
Detection & Prevention
Intrusion detection from both application and the network/Internet
is detected by FirewallNow! using high speed conditional algorithm.
Intrusions are logged
with FirewallNow! powerful logging engine (X6-Log), logs can range
from a direct application/packet header log to every single byte
of data from each packet!
Packets and application
connections that violates the FirewallNow! rules are logged as intrusions.
With the brilliant rule creation feature of FirewallNow! (One-Rule-All),
complex and unique rules that frequently require multiple rules
might just require one rule in FirewallNow!
Unlike others IDS products
that only detects, FirewallNow! does more than that. It actually
stops the intruder from coming in.
Anti-Port
Scanning
Using a powerful and sensitive algorithm, FirewallNow! detects and
reports port scanning activities on your server, both from the Intranet
and Internet. The algorithm is also used to provide a summarized
information of the port scanning activities.
Event
Reporting via Email
FirewallNow! supports email notification whenever an intrusion is
reported. Smart interval reporting will not clogged up your email
account. With this notification administrators can monitor, maintain
and fine-tune the organizations security policy in an easy manner.
Layered
Protection
FirewallNow! prevents security breaches using a unique two layers
protection system.
The application level
protection via TDI monitor each application in the server and flags
a security warning the moment any of the application issues an undefined
connection.
The second protection
using NDIS works on the packet level and FirewallNow! destroys any
abnormal packet. Incoming packets are matched against rules and
any violations of the rules are then flagged as an intrusion.
* Technical
description:
TDI (Transport Driver Interface)
NDIS (Network Driver Interface Specification)
Trojans
imprisonment
FirewallNow! Application
level (TDI) protection brings the threats of possible Internet Trojans
running on your server to zero. Using various proven techniques
to counter Internet Trojans, FirewallNow! creates an environment
that inhibit the possibility of these Trojans from functioning in
your server.
Rules confinement per
application: Applications can be compared against rules and Internet
Trojans will cease to function online. No rules mean no access.
No application can have Internet access without you giving it the
permission and in a defined behavior.
Anti-Hijacking
To date hijacking are the techniques that enable Internet Trojans
and Zombie programs the abilities to hijack server or
your Internet Explorer to perform its required connections. While
these technique would cause most if not all hardware firewalls and
even personal firewalls to fail, FirewallNow! spy-check
will detect these loopholes and deny the connection.
Smart
CRC
FirewallNow! performs CRC check on your applications. Smart Trojans
that replaces your application will result in a CRC alert. Each
application will have its fingerprint checked out and
any suspicious checksum will be reported.
Full
Path Support
Any application attempting to make a connection to the Internet
must be executed from its registered path.
|