Symantec Norton Personal Firewall - 3.0.3

It has never been clear to me whether NPF in anyway uses the built-in Apple firewall.

Among the features that factored into my decision several years ago to adopt NPF was its Stealth mode, which I was pleased to see incorporated in OS 10.4.x's built-in firewall when I had to make the switch while waiting for Symantec's compatible update to be released. When combined with a router device between one's computers and the internet, Stealth provides a great deal of protection

But there were other features of NPF I sorely missed when I had to temporarily switch to the built-in Apple firewall until the late-July release of NPF 3.0.3

1. NPF allows me to deny all access selectively to certain ports or ranges of ports. I missed that with 10.4.2's built-in firewall. For example, with NPF, I created six settings, two for individual ports and four for ranges of ports my research and trial-and-error found were the paths used by certain software to respond to pings from "home." Problem: those responses created conflicts.

2. Access for file sharing does not have to be an all or nothing proposition as it seems to be with the built-in firewall. I can restrict file sharing (and other sharing) to what amounts to a closed circuit between my two computers by identifying them in the NPF settings. Actually, you can create a "closed circuit" with any number of other computers that you "trust." You simply specify which addresses have access to specific ports.

3. One of the cooler features that you don’t see with Tiger’s built-in firewall is NPF letting you see, in real-time, which machines are connected to your computer, which service they are using, and their IP address. And if you see something with which you’re not fully comfortable, you have the option to disconnect them.

4. I can allow access for individual ports, such as the one used by my FAXstf Pro program.

5. I can choose for any port or for any range of ports to deny or allow access for incoming and/or outgoing traffic.

6. NPF's Finder menubar pull-down menu icon allows me to quickly enable or disable the firewall. Although launching NPF places its icon and its menu in the dock and I could handle enabling or disabling from there, my Finder menubar is less cluttered and never hidden.

7. NPF is automatically updated via Symantec's LiveUpdate per the schedule I set for weekly downloads of new virus definitions. I also can access LiveUpdate, Norton AntiVirus 10, and NPF from the same pull-down menu.

8. It provides several options for logging of suspicious outgoing and/or incoming activity as well as logging of Stealth mode activity.

9. I've used the program to track excessive, repeated efforts to ping my computer. It had a feature for identifying the company or institution by name, as well as number. That's good if you want to alert an organization of unauthorized use of their server.

10. NPF also provided options to select for notifying me when my other Mac settings conflict with my firewall settings and/or notifying me of conflicts with high port numbers.

11. All of the above are possible without my having to go into the Terminal or know what to enter in the Command Line.

12. Before Mike Romo started hanging around in the MacFixIt.com forums, I had very good technical support when I contacted Symantec. When Mike ran the now-closed MacFixIt.com Symantec forum and whenever he drops in on the MacFixIt.com Utilities forum, the support has not been "very good," it's been outstanding.

Respectfully, Norm

Footnote: My only association with Symantec has been as a consumer and as a volunteer external beta tester. I donated my time for testing NAV 10.0 before its public release, but not NPF 3.0.3.

Your local Apple store has over 30 Macs of all shapes and sizes on the internet with full, unlimited, access (it's not uncommon to see Dell and HP laptop users just outside the Apple store using the stores on open, high-speed, wireless network for free). Ask the Apple Geniuses what they are using as virus protection for so many computers on such a publicly open system.

They will simply say "nothing" other than Mac's built-in firewall. This is exactly what our company does on a periodic basis. We take 5 minutes to chat with the lead "Genius" about their store's system. Our Macs are far from being publicly known or accessed, and If it's good enough for Apple's own computer's, it's good enough for ours.

There is absolutely no reason to bring the fear and paranoia of Windows users into your own home and business if you are running on Macs.

Go to your local Apple store and do whatever they do for protection... nothing! It Works!!

Wake up people...Symantec doesn't give a rats butt about you or your Mac. This product is utter worthless crap. Avoid Symantec products like the plague.

Personal Firewall is real garbage like all Symantec products for both Mac OS and Windows anyway .....
And EAT a lot of memory and CPU in both Mac OS and Windows !!


Mac OS X built-in Firewall is really good enough, and Mac OS X 10.4 Tiger provides smoother settings with UDP.

If you need a software activity monitor, just use i Snitch, convenient, easy to use and 25 $.