For everything that lurks out there, RedCannon Security's Fireball CyberProtection Suite acts as a virtual bouncer that stands at your PC's Internet door. The $50 program combines a firewall and intrusion detection system with parental Internet-access controls; system-monitoring capabilities that install Microsoft's latest security patches for Windows and Internet Explorer so you don't have to; and Internet Protocol Security (IPSec) support to secure a telecommuter's virtual private network (VPN). It's a first-rate security solution that's clearly designed for home and very small business users.
Fireball's firewall analyzes Internet and local network traffic and lets you restrict communications between your PC and the outside world. The firewall can secure wired and wireless Ethernet as well as dial-up, DSL, and cable-modem connections, and identifies, blocks, and tracks hacker attempts ranging from Trojan horse programs to denial-of-service attacks and e-mail worms.
Alerts are accompanied by descriptions of the disruption and attacker. Like all good firewalls, Fireball monitors outgoing as well as incoming traffic, watching applications that connect to the Internet so you're not an unwitting host to malicious or marketing spyware.
Knock, Knock, Knockin' on Redmond's Door
The System Scan feature keeps up with hackers' constant hunt for and discoveries of new vulnerabilities in the Windows operating system and Internet Explorer browser; it keeps an eye on Microsoft's site for the latest security fixes and automatically downloads them for installation.
In a feature that'll appeal more to employers and parents than to workers and kids, Fireball lets you restrict the use of various applications and Internet access. You can set "allow" or "block always" settings; configure time and access restrictions; and review a log that records which Web sites were visited and how long applications were used. The latter also tracks PC users' attempts to visit questionable sites or launch off-limit applications, and you can customize content filtering with various categories as well as specific words, phrases, and Web sites.
To reduce obnoxious pop-up advertising, Fireball can block Javascript ads and lets you create a list of ads to block. The software also blocks scripts, embedded objects, and MIME content and gives you control over site-visit cookies.
Both full-time teleworkers and weekend backloggers who just occasionally connect to corporate systems from home or the road will appreciate the IPSec virtual private network client, which lets you configure VPN users for secure links to remote LANs. Fireball's IPSec client works with VPN gateways and compliant firewalls, and supports well-known VPNs such as those from Checkpoint and Cisco.
What's missing? Well, while Fireball offers a wealth of features, it lacks antivirus capabilities. Compared to Symantec's Norton Personal Firewall 2004, RedCannon's package boasts VPN support, e-mail and content filtering, and Windows security upgrades for the same price. On the other hand, Symantec throws in virus- and spam-fighting functions for just $20 more with its Norton Internet Security 2004 bundle, which may be a stronger deal.
Test Drive
I found Fireball to be straightforward to install. The setup procedure performed a vulnerability assessment of my PC's operating system, applications, and TCP/IP network stack and let me configure the e-mail client and firewall security. You can also fine-tune Fireball's detection for specific types of attacks such as denial of service, HTTP attacks, buffer overflows, and Trojan horses.
Setting up profiles was easy. I simply entered a user name and password; checked boxes to monitor Web sites, applications, or both; and added the sites and programs I wanted to restrict. A wizard that walks you through the steps of entering a VPN profile name and configuring IPSec.
Similarly, setting up filters to block pop-up ads and questionable e-mails and Web sites was no problem; it's easy to specify multiple profiles for different users and to set time parameters for the duration any user can access any given application.
Fireball's interface is friendly and intuitive, with a main console that assigns buttons to the main functions (firewall, intruder tracking, privacy, scanning, VPN, and profiles). The visual metaphor involves turning familiar dials -- from Off to On when configuring the firewall, for example, then dialing in low, medium, or high security defaults.
You can leave a mini-console that summarizes the main features on your Windows desktop; it's well done, but rather big to have sitting on your screen all the time. Symantec does a better job of offering a desktop icon that's just as available but less of a visual nuisance.
The Windows 98, Me, NT 4, 2000 Professional, and XP-compatible Fireball CyberProtection Suite can be evaluated via a free 15-day trial download. RedCannon offers tech support via e-mail, but no phone support, and follows the unfortunate practice of limiting free support and product updates to one year; the firewall will continue to work after the subscription year ends, but continuing support and updates will cost you $20 annually.
