View Single Post
Old 09-28-2006   #9 (permalink)
Jeff


 
 

Re: Might be a good idea to disable Windows Firewall altogether when in an Active Directory Domain

Ed,
It doesn't annoy me;
in fact;
I think it's kind of humorous;that you feel the need to include your
certifications in a post.

And; if I'm not mistaken; MSFT has devoted a whole bunch of resources to
business migration.

Here for example:
http://www.microsoft.com/technet/win...y/default.mspx


You outta know; that;the best defense is hardware firewalls;
and all those initials-lol
BTW-running a laptop on mutiple networks; Vista firewall; no hacks;no
breakins;etc.
And at home;behind a hardware firewall;just for giggles.

Jeff

"Edward Ray" <ewray@newsgroup.nospam> wrote in message
news:92B9F241-D74A-4A1B-9ACB-EBFC1EFF0DE4@microsoft.com...
>
> "Jeff" <scerevisiae@gmail.com> wrote in message
> news:eV5yusw4GHA.4832@TK2MSFTNGP06.phx.gbl...
>> Ed,
>> Gettin all wrapped up in this huh?
>> If you look at Windows Firewall; it's easy to setup now
>> And it's easy to use;
>> Jeff

>
> Jeff:
>
> It may be easy for a single user, but when you have an organization with
> >500 potential Vista clients who is paying me for advice on ease of use, I

> have to report its shortcomings. Vista is geared primarily to get Windows
> 2000 (and potentially Windows XP pre-SP2) clients to upgrade to Vista.
> Stand-alone I am sure it works great, but for corporate buy-in it must
> play well with existing infrastructures. As I said in previous posts, my
> advice is to disable the firewall initially, then reenable after GPO's
> have been applied. In a network with multiple layers of protection, this
> does not present a major security risks. Perhaps when Vista ADM/ADMX
> files are released this will be an easier transition, but I will still
> prefer third-party AV/Firewall/IPS/App Protection over Windows Firewall
> for laptops, PDAs and other wireless devices that use the Windows OS.
>
> Just becasue it annoys you, my certifications are below. I also have a
> BSEE from Cornell and an MSEE from UCLA (nose turns upward... )
>
>
> --
> Edward Ray
> CCIE Security, CISSP, GCIA Gold, GCIH Gold, MCSE+Security, PE
>


My System SpecsSystem Spec