Richmond Systems claims its NetOp Desktop Firewall software is the world's first driver-centric desktop firewall with centralised control. Designed for IT managers to protect laptops by monitoring traffic in and out of a computer, as well as the processes running on it, the software aims to prevent systems introducing an infection into the entire corporate network when they connect. By centrally applying profiles, administrators should be able to ensure that security settings are adjusted automatically according to the computer's environment. And processes can be allowed or disallowed centrally, meaning that malicious programs can be eliminated within the first few critical minutes of an infection. NetOp Desktop Firewall's filtering algorithms run at the NDIS driver level, protecting client PCs before Windows loads. NetOp's bidirectional ports and protocol blocking also allow configuration of tighter system security, allowing you to set up trusted networks for secure applications, as well as stealth ports to 'hide' computers from network hackers. The firewall security scheme consists of two modules: NetOp Desktop Firewall and the optional NetOp Policy Server.

Pros: Driver-centric; process controls; packet filtering
Cons: NetOp Policy Server is an optional extra


Edited Release: Richmond Systems has launched NetOp Desktop Firewall, the world's first driver-centric desktop firewall with centralised control. NetOp Desktop Firewall provides a powerful tool for protecting corporate laptops by not only monitoring traffic in and out of a computer, but also the processes running on it.

NetOp Desktop Firewall addresses the security needs that corporations encounter when their employees increasingly need to take their corporate laptops out of the perimeter firewall. Going beyond the traditional firewall offering, NetOp Desktop Firewall offers sophisticated process and application control, protecting all the computers in a corporate network and in particular taking care of laptop security.

Richmond's new firewall product prevents unwanted or dangerous data from entering or leaving a laptop - wherever it happens to be – because centrally managed processes ensure that only authorised programmes and services can run on the system. This high level of firewall protection applies even when laptops are connected to a non-corporate network.
Will Johnson, marketing manager for Richmond Systems comments: 'NetOp Desktop Firewall, ensures that laptops coming into a corporate network, and going within the perimeter firewall, will not introduce an infection into the entire corporate network when they connect.

'What's more, the NetOp Desktop Firewall can be centrally managed; ensuring that users can't override security policies and that change in policy can be immediately enacted and rigidly enforced. With this new desktop firewall, administrators will have the ability to manage each PC on their network by defining and adjusting profiles and security settings in real-time."

Companies have started to realise that a perimeter firewall is not enough. All it takes is one single computer behind the perimeter communicating unrestricted material, for security to be jeopardised. Laptops that leave and then return to a trusted corporate network pose a serious security risk when they connect to the network again. As Thomas Raschke, program manager, European Security Products & Strategies, IDC, comments: 'A little known but very serious threat is the fact that more than half of all the security related incidents that result in quantifiable damage stem from within the firewall, for example as a result of disgruntled employees, careless partners, or other authorised users that either intentionally or unintentionally introduce malicious programs and damage an organisation's network.'

With the NetOp Desktop Firewall, Richmond offers the ability to centrally control and manage the firewall configuration of all the desktop firewalls in a network. Administrators and security managers can easily, and in real-time, define and manage the security level of each PC. By centrally applying profiles, administrators can ensure that security settings are adjusted automatically according to the computer's environment. And processes can be allowed or disallowed centrally, meaning that malicious programs can be eliminated within the first few critical minutes of an infection.

Unlike standard personal firewalls where the process or application control, if any, is very basic, the NetOp Desktop Firewall offers sophisticated process control. The perfect supplement to a perimeter firewall, NetOp Desktop Firewall provides security that is 100 per cent at the driver-level - granting maximum protection to the user, even if the firewall application itself is not running. The firewall is in effect always on, ensuring all network traffic is blocked and any risk of a security breach when the system is started is eliminated.

Driver-level security for both communication and process control makes it possible to stop both unwanted attacks on the computer and also unwanted processes from running. This technology also puts the security control in the hands of the administrator, preventing ordinary users from making unauthorised changes to the security level of their laptops or even from disabling the firewall when it suits them.

The NetOp Desktop Firewall can recognise different security profiles depending on a user's location. Unlike other personal firewalls that might recognise the environment but depend on individual users to ensure that security is upheld, with the NetOp Desktop Firewall, the appropriate security profile is automatically selected based on the type of environment. There is no need for any individual user intervention and users can't interfere with the security level. For example, users will be able to do what they need to do when using their laptop at home, but the security level shifts to high-level protection when they return to work, so that their company and colleagues are protected.


To download a free trial of the NetOp Desktop Firewall, visit the product website at http://www.netopuk.com.

BIOS, 02.02.05