Earthweb.com Practically Networked Home Earthweb developer.com HardwareCentral earthwebdeveloper CrossNodes Datamation
Welcome to PractiallyNetworked
Product Reviews

 • Routers
 • Hubs/Switches
 • Wireless Gateway
 • Wireless AP
 • Wireless NIC
 • Network Storage
 • Print Servers
 • Bluetooth Adapters
Troubleshooting
& Tutorials

 • Networking
 • Internet Sharing
 • Security
 • Backgrounders
 • Troubleshooting
    Guides

 • PracNet How To's
User Opinions
Practicallynetworked Glossary

 Find a Network Term  
 
Forums
About
Jobs
Home

Find a Hotspot...

Add this search code to your site!
Copyright 2003Jupitermedia
  Most Popular Tutorials

• Microsoft Vista Home Networking Setup and Options
The most daunting part of upgrading to Windows Vista may be trying to figure out where in the layers of menus the networking and file-sharing options are hidden.

• Do It Yourself: Roll Your Own Network Cables
It may not be something you do everyday, but having the supplies and know-how to whip up a network cable on the spot can be very handy.

• Tips for Securing Your Home Router
Seemingly minor and easily overlooked settings can still have profound security implications. Here are some steps you can take to make sure your wired or wireless home router — and by extension, your network — is as secure as possible.

  Most Popular Reviews

• Microsoft Windows Home Server
If you have a home network, you'll welcome the easy file sharing, remote access and the image-based backup features of Windows Home Server.

• Iomega StorCenter Network Hard Drive
Iomega's fourth generation StorCenter Network Hard Drive brings many of the features found in higher-end storage devices down to an attractive price.

• MikroTik's The Dude
This free tool delivers many of the same capabilities that you'd find in pricey network monitoring tools. As long as you don't mind tinkering, The Dude is a decent network utility that should be worth the download.


 
 Sonicwall SOHO Internet Security Appliance

Page 4 

 Author: Tim Higgins
 Review Date: 9/29/2000


Blocking and Logging

As described on our "How Firewalls Work" page, all NAT based routers do some sort of "stateful Inspection".  The difference in NAT firewalls is how much inspection they do, and the SOHO does a lot!

The SOHO's focus is on blocking Denial of Service (DoS) attacks and port scans, and it appears to do it well.  I tried both a port scanning program which scanned ports used by common Trojan and similar attacks and also a Network Management tool which mapped networks by pinging ranges of IP addresses.  In both cases, the SOHO logged and blocked the scans, and emailed me an Alert (more about that later).  It even properly identified the program being scanned for in some cases.  I didn't check any of the SOHO's DoS attack blocking capabilities, mainly because I didn't have time to locate an attack program.


The SOHO's has many logging features.  You can select what's logged, and what is considered an Alert.  There's also a Log Redundancy filter that's enabled by default that prevents duplicate consecutive log messages from being logged. These messages can be common, due to things like network retry mechanisms, and SonicWall recommends keeping the filter enabled to avoid unnecessarily filling up the log too soon.  If the log does fill up (which shouldn't happen due to the automatic log emailing feature), you can choose between clearing the log and shutting down the SOHO in order to preserve the log data.  Detailed logging to a Syslog server is also supported if you really want the gory details (if you need a Windows or MacOS Syslog client, go to this page).

But what good is all this stuff if you don't remember to check it?  The SOHO helps you out there, too, with log and alert emailing.  You can email the log to one email address at a specified daily or weekly time, or when the log fills up.  Alerts are sent within seconds of detection, to a separately defined email address from the log email address.

Reporting

Unlike the inexpensive routers which have recently added logging capability, the SOHO does not keep a log of Web site access.  Instead it performs three rolling analyses, which can be viewed, but not emailed:

  1. Top 25 Most Accessed Web sites
  2. Top 25 Bandwidth users by IP address
  3. Top 25 Bandwidth consumers by service (Port and Protocol)

These reports will give you a quick idea of where your bandwidth is going.  You can enable and disable data collection and clear the accumulated data, but can't save it.

That about does it for logging and reports. 

  • Page 1
  • Page 2
  • Page 3
  • Page 5
  • Page 6

  •  Add YOUR Opinion  

     Opinion Summary:     72.2%   |   27.8%  |   out of 36 reviews  
     Read Reviews by Users  

    Print this Page 









    Earthwebnews.com Earthweb developer.com HardwareCentral earthwebdeveloper CrossNodes Datamation


    Home | Networking | Backgrounders | Internet Sharing | Security | HowTo | Troubleshooting | Reviews | News | About | Jobs | Tools | Forums