Security Questions

[DaveStones]

Hi. I’d like to ask a few questions about the security of Wingate and the client software (WGIC). Host = XP home SP2 connection = 52k dialup, Client = XP home SP2 + Windows 98SE.
I am interested in running the WGIC because I serve a game that requires incoming connections on three UDP ports. The game is run on a client computer. Now the help files say that port forwarding isn’t necessary to do this when running WGIC. Do I have to setup Netgate to allow these incoming connections or does it do it automatically. If it does it automatically, how do I stop other software (unexpected spyware, Trojans, P2P and other general crap) opening ports allowing incoming connections? The other thing I would like to know is does Netgate act as two direction (in and out traffic) firewall? Does it protect the host PC from outside attacks/unauthorized incoming connections or block newly installed software until authorized? Are Wingate and WGIC compatible with another firewall like Zone Alarm Pro, or should there be no reason to require such software when running Netgate? Thankyou in advance…..

[adrien]

Hi. I’d like to ask a few questions about the security of Wingate and the client software (WGIC). Host = XP home SP2 connection = 52k dialup, Client = XP home SP2 + Windows 98SE.
I am interested in running the WGIC because I serve a game that requires incoming connections on three UDP ports. The game is run on a client computer. Now the help files say that port forwarding isn’t necessary to do this when running WGIC.

Do I have to setup Netgate to allow these incoming connections or does it do it automatically.

when you run the application on a machine which has the WGIC installed, it intercepts your application when it opens ports, and automatically opens these on the server.

If it does it automatically, how do I stop other software (unexpected spyware, Trojans, P2P and other general crap) opening ports allowing incoming connections?

You can allow/block per application with the policies in the Winsock Redirector Service (which is what the WGIC uses).

The other thing I would like to know is does Netgate act as two direction (in and out traffic) firewall?

yes

Does it protect the host PC from outside attacks/unauthorized incoming connections

yes

or block newly installed software until authorized?

that depends on how you set up the policies in the Winsock Redirector Service

Are Wingate and WGIC compatible with another firewall like Zone Alarm Pro, or should there be no reason to require such software when running Netgate? Thankyou in advance…..

In general we don't recommend running Zonealarm on the WinGate machine as it ususally interferes with the WinGate ENS (network) driver, however it should be ok on the client machine.

[DaveStones]

Thanks Adrien for your reply. I’m glad to hear that I don’t require a firewall on top of Wingate. When you talk about setting policies in the Winsock Redirector Service I take it that it’s set up on the host machine through Gatekeeper. Would I require to configure WGIC as well (to block any new software installed on client pc’s) or do you only need to change WGIC settings so as to be able to elect which software uses NAT, WGIC or proxy connections?(Supposing Wingate host was set up like that). As for setting policies in the Winsock Redirector Service I’ll read some more help files, learn, learn, learn, and if I need any more help setting them I’ll be sure to post for a bit of help. Once again, thankyou.