Request Assist. w/SYGATE Configuration

Ok, in a quick search here, I wasn't able to find what I was looking for, which is some help getting a new Sygate FW configured correctly.

I suppose my first question would be under the "Applications" tab (button) from the main interface.

There seem to be a lot of "C:\Windows\System32..." services (programs?) set to "Ask" by default (upon initial setup/install), and I'm wondering: Shouldn't most of these be set to "Allow"?

 

Greetings Ron,

I'm curious as to which version of the Sygate firewall that you are using, the free version, which is no longer supported or the paid version? But in answer to your question, NO! The whole purpose of a firewall is to allow or deny access to any application, service, or program that the user wishes. Deciding what to allow or deny is part of the learning process!

The only things that I allow access to without asking are my antivirus, CCleaner, Malware Bytes, Super AntiSpyware, A2 Squared, Java updates, IE, and FireFox! I'm sure that others will have different opinions.

Hope this helps!

 

Thanks for the reply, it helps, some ... I think (?).

I'm using the Sygate Free (v. 5.6.2808).

You mean not even "Generic Host Process" should be "Allowed"? And what about the whole "Server/Client" thing (in the Advanced tab settings)? I recall my old Zone Alarm program stating specifically that "very few" programs should have "Server" rights/access. Which programs should have Server rights/access, and which ones should not? And what about "Clients" - should all of the programs I use "Act as Clients"?

Thanks ....
PS - I would just like to be sure I have this program tweaked as absolutely tight as possible, and yet not have too awful much trouble with pop-up messages, and be able to surf the net, and use my printer. Thanks again in advance ....

 

Ok, can anyone please just fill-me-in on what program (or programs) should be 'Acting as a "Server" (what program/programs should have Server "Rights") in my Firewall?

My understanding is that few (perhaps, only "one"?) should have this permission in a firewall. Is it the Generic Host Process?

It seems to me that Sygate's 'out-of-the-box' setup is allowing many more than that by default.

Thanks in advance ....

 

Ron,

Sorry if I left you hanging in my last post and my answer seemed in any way smart as it wasn't intended to! I can only speak for myself, but I do not want my computer acting as a server at any time. The file that you are referring to is csrss.exe which is the MicroSoft Client/Server runtime. I have mine set to ask for each occassion. The Generic Host process of which svchost.exe is a part, I have set to allow. This is for programs that rely on dll files and dependencies.

As for settings in the Advanced Tab, I don't have any! Please be aware that any settings that you make here will over ride anything in the general view that you have set to ask or deny. I believe that there is also an entry for printer communication in the general view.

Only asked about which version of Sygate that you were using, as I use the free version also, even though it is no longer supported. It still does everything that I need it to do, even though it isn't as user friendly as some.

Hope this helps!

 

Beautiful. Thank you.

I am away from that PC for another 24 hours or so, but your reply here should help greatly.

I don't recall anything "smart" (assuming you mean, "sarcastic"?) - I appreciate all help, even if it is "smart" :-D - the only thing I'm sort of wondering is: Where in the world did ya get the name "Ron" for me? :confused - My name is Glenn - and I'm like you in that I want NOTHING "Acting as a Server", unless it is absolutely necessary.

Thanks again. I may have another question (or nine!) when I get back to that PC .... so you may not have "heard the end of me"! :-D :wave


Best,
"Glenn" ...

 

Glenn,

Sorry about the name mixup! Guess that I was thinking of a friend of mine while replying. Noticed that you had a problem with MalwareBytes updating which was firewall related. I did include this in what programs that I gave access to without asking, but like I said this is a learning process.

Also forgot to mention a few others that I give access to without asking, email, browsers, WGA, and Windows Updates!