Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

What is good substitute for windows server 2008 firewall with some Intrusion Prevention System Options?


locked by HopelessN00b Jan 24 at 21:36

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as not constructive by mailq, Iain, Shane Madden, Skyhawk, GregD Oct 29 '11 at 19:07

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Sure. A Cisco router in front of a Windows Server 2008. – mailq Oct 29 '11 at 18:42
@mailq Normally I'd agree with you on the dupe, but the Server 2008 firewall is majorly different than the 2003 firewall that's discussed in many of those answers. – MDMarra Oct 29 '11 at 18:45
@MarkM Ok, noted and removed. But I can't revoke the vote (technically). – mailq Oct 29 '11 at 18:48
Could you be specific about what you want? Why are you looking for a substitute? – freiheit Oct 29 '11 at 18:56

1 Answer 1

Windows Firewall in Server 2008 and later does quite a bit more than application-specific rules. It does port-based rules, service-based rules, and it also can handle IP restrictions on any rules as well. It's quite robust, but still different than a typical hardware firewall or pf and netfiler. If you need something like a hardware firewall, use one on conjunction with your software firewall.

I don't have problem with the windows firewall, I'd like to know if there is an alternative. – Mat Banik Oct 29 '11 at 18:50
@MatBanik Of course there are alternatives, many security companies sell them (Symantec, McAfee). Are they a good idea? No, probably not. Why would you want to replace a well-integrated and programmatically manageable piece of software with one that's less integrated and has the same functionality? Unless you have a specific need to replace the Windows Firewall, there's no good reason to. – MDMarra Oct 29 '11 at 18:53

Not the answer you're looking for? Browse other questions tagged or ask your own question.