Zone Labs' glee at hobbled Vista firewall
When Microsoft updated Windows XP with Service Pack 2 (SP2) in August 2004, for the first time Windows included a firewall that was switched on by default. In Windows Vista, the firewall will be capable of blocking both outgoing and incoming traffic but Microsoft has not explained why the outgoing function will, by default, be inactive.
According to Microsoft, Vista is able to protect against incoming attacks but users will have to "selectively configure the firewall" to stop unauthorised applications from connecting to the Internet.
Michael Warrilow, director of Sydney-based security consultancy Hydrasight, told ZDNet Australia that one reason could be that predicting the behaviour of applications is very difficult.
"The firewall is to protect against inbound attacks -- instead of protecting the rest of the world from you. Also, the behaviour of applications is more difficult to predict for outbound traffic," he said.
One company that is rather pleased about Microsoft's decision is Zone Labs, which is probably best known for its ZoneAlarm firewall application.
During a short visit to Sydney last week, the general manager of Zone Labs, Laura Yecies, told ZDNet Australia that Vista's firewall is better than the one supplied with Windows XP but it will lack some key features that come as standard on the free version of ZoneAlarm.
"It is not final but [the Vista firewall] certainly doesn't have the behavioural capabilities [of ZoneAlarm]... It does have the outbound [blocking] capability but that is off by default," said Yecies.
Zone Labs is looking forward to Vista's arrival because it is likely to further boost sales of the company's firewall products, which is what Yecies said happened when Microsoft launched SP2 for Windows XP.
"There was a lot of attention for SP2, which put more attention on firewalls and most [press coverage] said that SP2 is better -- but really they made the point that you need a good firewall and if you are looking for a good firewall then ZoneAlarm is even better -- so we had an increase in sales," said Yecies.
Overall, Yecies believes that Zone Labs customers will be better off once Microsoft launches Vista because that will increase the overall level of security: "I am glad they are making their system better. My customers will be more secure if the average Microsoft customer has better security on their system -- because they will be less likely to be a bot."
Years behind the specialists?
ZoneLabs is two or three years ahead of Microsoft in terms of firewall technology, according to Yecies, which is a statement not disputed by Hydrasight's Warrilow.
"A whole lot of the IT industries' business model is to stay one step ahead of Microsoft or they are out of the game. They need to keep ahead or people will go with Microsoft," said Warrilow.
Yecies said that when Vista is released, Microsoft will still be at least a couple of years behind: "It is impossible to predict with certainty but what we are seeing in the beta [of Vista] is the firewall is again better -- but [Microsoft] will be about where we were two, maybe three years ago".