Despite some glitches and Microsoft delaying the rollout for a week,
Service Pack 2 is on its way to all Windows XP users via Windows
Update. Many large installations have turned off or disabled the update
out of concern for the many programs Microsoft has documented as not working
or needing updates in order to work with SP2. Firewalls, VPNs and SQL
Server based applications seem to be the primary casualties. FoxPro
applications using DBF-based data appear to be unaffected.
Microsoft is enabling the firewall by default, a reversal of their
earlier configuration. While it is a step in the right direction, the
firewall is still far too weak to be the sole line of defense for a
machine attaching directly to the internet. The firewall included with
Microsoft XP doesn't deserve the name. A
firewall is an internal structure in a building that is designed to
stop fires from spreading by imposing a solid barrier. In the Windows
XP case, this firewall is one-sided, blocking some traffic from
ourside, but letting anything exit from inside. So, if your machine
develops a problem and starts broadcasting SMTP spam, or calls the
mothership and transmits your last tax return, there's nothing in the
XP firewall to prevent it. That's dumb. Look for better solutions
elsewhere.
If you are connecting directly to the internet, or take your machine on
the road and connect to foreign networks, look at a software firewall
like Kerio or ZoneAlarmPro. I notice that grisoft.com is promoting a nice package of their excellent AVG anti-virus software with Kerio for USD $55. Worth looking into.
