Another neat feature of the Sunbelt Kerio Personal Firewall (my choice of firewall programs), is its two Intrusion Prevention systems.
The free version includes the Network Intrusion Prevention System (NIPS)
According to the program’s control screen:
NIPS scans network traffic andblocks recognized attacks based on a database of known attack signatures. Network connecitons carrying detected attacks are closed and dangerous data is not allowed to reach the application. NIPS can generate a small number of false positives.
One of kerio’s other features — one that’s available only in the paid version or during the free 30-day full-function trial — is its Host Intrusion Prevention System (HIPS).
According to the program’s control screen:
HIPS pevents attacks that reach vulnerable applications from succceeding by blocking any illegitimate behavior attmpted by the affected applications. HIPS does not require signature updates to learn about new threats and therefore is effective at stopping newly spreading or mutated attacks. HIPS rarely generates false positives.
I’m glad that I use the Sunbelt Kerio Personal Firewall