All the tests on the test candidates were performed on a system running Windows XP with Service Pack 2, with system memory of 512 MB. Here is a breakdown of all the parameters logged.

Security

A firewall has more to do than just guard the doorway into the PC Ultimately, a firewall monitors and controls incoming as well as outgoing network traffic. In order to detect loopholes in the firewalls, we performed leak tests on them, thereby checking the internal integrity .of the firewall in a scenario that the PC was already infected with malware or viruses. The techniques applied in these leak tests are similar to steps taken by Trojans and other viruses to establish contact with the hacker server.

Other security measures tested showed whether the firewalls could cope with at least the basic attacks. We initially started with Denial-of-Service attacks (DoS), which is an attempt to paralyze the computer,the hacker bombards it with ping queries till it cannot process them any further. A DoS attack results in the disruption of a connection to the Internet due to unavailability of the server. All firewalls should be able to repel such attacks. Additionally, they should also protect against port scans, using which you can check whether a port in the PC is open or not.

Functions

Security rules must be well implemented so that the firewall is a good guard-dog.
If the rules are implemented too strictly, then it is difficult for a program to connect to its server through the Internet, but if the firewall is too lax then there is a possibility that a hacker can log into your PC. The problem here is that of configuration¬most users are intimidated by queries for port numbers, IP Ranges, and log types. Hence, ideally, the firewalls need to have default settings that protect the PC as well as let genuine calls through. Finally, a firewall is safe only when it's always kept updated and that's why every tool should be equipped with an update function.

Ergonomics

If there is an unauthorized entry through a port. then the firewall should warn the user of the intrusion. This popup should be coherent enough that he can then decide whether the application is to be allowed on the I nternet or not. For that, only important and pertinent information, such as program name and port number, should be displayed in the message so that it isn't perceived as gibberish. It is also important that the firewall shouldn't be a system resources hog, so we've taken a good look at the RAM usage of the tools.

Attachment 8994

Value for Money

The parameters used for evaluating the programs were assigned a graphical rating out of a scale of five. These measures include performance, functions, and ease of use. The overall rating shown in the test result table is based on all these factors.
In addition, there is a value for money rating for each application. This rating was
obtained by compiling the features and the utility of the application against its price. In case of freeware and shareware tools available for downloading from the Internet. we replaced the price with the download size (and therefore, the time taken to download the application) for arriving at the value for money rating.

Test Results

SECURITY

The result here is shocking¬Windows Firewall as well as PC Tools and Ashampoo identified only a maximum of six percent of all attacks. Meanwhile Sunbelt's Personal Firewall managed 18 percent and even the runner-up, ZoneAlarm, identified about 63 percent of the attacks-all these numbers are quite small. Only Comado impresses with a 95 percent detection rate. All candid'ates passed the DoS attack.

FUNCTIONALITY

Most of the candidates scored handsomely in this area. That is because everyone offers automatic rules except for Ashampoo. Furthermore, all the test candidates maintain a log book so that the user can peruse through it to find out which programs have communicated with the Internet. Comodo, ZonEjlAlarm and PC tools also come with an archive tool as a supplement to the log.

ERGONOMICS

ZoneAlarm is the least prone to displaying techno-babble. It displays
all important properties that can be read at one glance. If the user wants more information he can click the link to the ZoneAlarm website. Unsurprisingly, the warning messages displayed by Windows Firewall are the worst as it offers only rudimentary information. The biggest system resource hog is Sunbelt's Personal Firewall. It consumes around 50 MB, while Comodo uses a relatively infinitesimal amount of about 5 MB.

Verdict

Comodo proves that you can have it all. Here is a firewall, which costs nothing, provides almost perfect protection and uses the least system resources. Go ahead and install it if you are using the default Windows Firewall; this program will do a better job at protecting your PC.