View Single Post
Old 09-28-2006   #8 (permalink)
Edward Ray


 
 

Re: Might be a good idea to disable Windows Firewall altogether when in an Active Directory Domain


"Jeff" <scerevisiae@gmail.com> wrote in message
news:eV5yusw4GHA.4832@TK2MSFTNGP06.phx.gbl...
> Ed,
> Gettin all wrapped up in this huh?
> If you look at Windows Firewall; it's easy to setup now
> And it's easy to use;
> Jeff


Jeff:

It may be easy for a single user, but when you have an organization with
>500 potential Vista clients who is paying me for advice on ease of use, I

have to report its shortcomings. Vista is geared primarily to get Windows
2000 (and potentially Windows XP pre-SP2) clients to upgrade to Vista.
Stand-alone I am sure it works great, but for corporate buy-in it must play
well with existing infrastructures. As I said in previous posts, my advice
is to disable the firewall initially, then reenable after GPO's have been
applied. In a network with multiple layers of protection, this does not
present a major security risks. Perhaps when Vista ADM/ADMX files are
released this will be an easier transition, but I will still prefer
third-party AV/Firewall/IPS/App Protection over Windows Firewall for
laptops, PDAs and other wireless devices that use the Windows OS.

Just becasue it annoys you, my certifications are below. I also have a BSEE
from Cornell and an MSEE from UCLA (nose turns upward... )


--
Edward Ray
CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE

My System SpecsSystem Spec