Agnitum OutpostPersonal Firewall Pro 2 review

We knew that Outpost Personal Firewall Pro 2 would improve on its predecessor, but this version is a major upgrade. I'm not just talking about the superb revamped interface, which couples simplicity with power, but a quick look under the pretty skin confirms that this is a serious development. Not only is this second-generation product rock solid when running on Windows XP, but it also supports Internet Connection Sharing, Remote Desktop and Fast User Switching - exactly the kind of thing that confuses and crashes inferior products.

Somehow, Agnitum has managed all this without over-complicating matters. Installation is a breeze - you go from click to configure in a couple of minutes - and the default Wizard mode makes for easy work thereafter. The first time any application wants outward-bound access, you get a pop-up that lets you allow it or block it, just once or always. Like ZoneLabs' ZoneAlarm Pro (see issue 102, p82), the default privacy and permissions worked well, dividing applications into allowed, semi-trusted and blocked categories.

Another new feature is boot-up protection for Windows, so the system is defended before any malicious apps get a chance to start. Plus, the component-control feature means that your applications are monitored for activity, as well as their components, making it impossible for a Trojan or virus to impersonate a trusted app. Outpost uses the Message Digest MD5 algorithm to calculate a checksum for each trusted app and authenticates this digital application signature each time that app is launched.

Outpost follows an open-architecture, modular structure, with the core capabilities implemented as DLL modules, which are 'independent' in nature. This means that all the extras like the email-attachment filter, content filtering, ad blocking, active elements blocking, web history concealment and cookie control are available and work smoothly.

However, the crowning glory is the event logging. The database-driven system allows activity to be filtered and output according to your needs, and it outstrips all the competition, including ZoneAlarm, for ease of use. Look at the screenshot - it really is that straightforward.

Like ZoneAlarm, however, you shouldn't confuse the 'Pro' product with the free versions, which are lacking in numerous areas. A Pro licence gets you round-the-clock technical support direct from Agnitum, whereas the free version enables you to access the user forums only, although these are still excellent places to look when you have a problem. But the differences don't stop at the support desk; many of the features, such as stateful inspection, component control, boot-up protection, Flash banner blocking and advanced logging are only available to Pro users.

If you throw in the reduction in CPU load by more than 50 per cent and memory hogging by 40 per cent over previous versions - thanks to the new logging system - the case for Outpost Pro gets even stronger. Of all the software firewalls we've tested in the last year, Outpost has the least impact upon system resources, despite its ability to handle up to 1Gb/sec of continual traffic and monitor 200 simultaneous connections.

Of course, no software option could claim to be the perfect firewall, but Outpost is the best of its breed and fully deserves its A List placing.

Author: Davey Winder