Internet Firewall 2000

Digital Robotics' Internet Firewall 2000 is marketed as "the most technologically advanced and easiest to use suite of Internet security tools available". In reality, IWF2K is the opposite. The only positive I noted with this software package is the inclusion of a visually appealing graphical user interface. Upon loading IWF2K, the user is presented with a screen outlined with burning text and other supposedly "cool" graphics. My positive experience ended there.

Utilizing the series of online tests listed earlier, I found Internet Firewall 2000 not to be a true firewall application. It is really a port monitoring utility. Port monitoring simply listens for activity on certain ports. Port listening requires that the port be placed in an open state. Then, if a suspicious activity occurs, the port monitor will attempt to close the port and alert the user. Since the port was originally open, a clever attacker could bypass Internet Firewall 2000's "security features". A true firewall configures a protected port to be stealth compatible, which means the port will not respond to any inbound network activity. Thus, the protected system should appear nonexistent to attackers using port scanning tools.

Another severe security risk associated with IWF2K is that it does not close the NetBIOS (Port 139) to transfers. NetBIOS governs network file share capabilities. Port 139 is the easiest way for an intruder to access a Windows system, and this port should be closed to all Internet activity. IWF2K's inability to block this port attests to its complete lack of usefulness.

To further examine inherent security risks, a complete port scan yielded a surprising result. I first configured Internet Firewall 2000 for the maximum security available. Then I launched an nmap network scan with Hacker Whacker. The scan was able to probe and access a large number of open ports. Not once did Internet Firewall 2000 actively do anything to block these scan attempts.

IFW2K also lacks the ability to trace or log network activity, a feature that most firewalls in this review include. I cannot recommend Internet Firewall 2000 to anyone seeking a personal firewall package. Even with its integrated features, such as virus scanning, the $39 cost cannot be rationalized. Its virus scan utilizes an online utility. For those interested in this capability, Trend Micro's HouseCall provides free online virus scanning. IFW2K was the most disappointing product employed in this review.