Our expert, award-winning staff selects the products we cover and rigorously researches and tests our top picks. If you buy through our links, we may get a commission. Reviews ethics statement
Installing NPF 2003 and configuring it for the first time is as easy as pie. The Security Assistant wizard walks you through six easy-to-understand screens that set the firewall to protect a home network, configure the firewall to let apps access the Internet, and establish any privacy safeguards that you want to implement. By default, the firewall is up, and security is in place. It's foolproof, even for firewall neophytes.
Since this review was first posted, Symantec has removed a feature we liked from the final product shipped to customers. For details, please see our corrections page.
But like last year, we still ran into one problem: NPF 2003 doesn't migrate custom settings--such as those you've worked on to tweak access for certain applications, or, in our case, to use with our satellite Net connection--forcing us to re-create them. Nasty.
Personal Firewall also integrates well with other Norton utilities--Norton AntiVirus and Norton SystemWorks in particular--and it shares the same green-light/red-light interface, allowing you to see which security provisions are activated and which are not.
There's a price to pay for this simplicity, however. Norton hides its configuration settings several screens deep. For example, the overall firewall security level (Low, Medium, or High)--visible from the top page of the old interface--is now buried, along with advanced features, requiring several clicks of the mouse to uncover.
Unfortunately, the more advanced your needs, the more troublesome NPF 2003 becomes. Want to set it to block ActiveX Controls? That's a six-click process through three dialogs. And unlike some firewalls, Norton doesn't let you disable cookies selectively. In other words, you can't specify which sites' cookies you'll accept; it's an all or nothing deal here.
Nonetheless, NPF 2003's several new features make it an even more effective guardian for the masses. The most important addition: an enhanced intrusion-detection system that not only blocks port scans from malicious users, but also looks at each in- or outbound data packet. If NPF spots suspicious data transfers or transfer methods, it compares these to a "signature" database that it updates when you do a LiveUpdate (Symantec's update feature) of Firewall, and it automatically drops the packets coming from the offending computer. This method catches and halts worms such as Nimda and Code Red.
Also new is the Block Traffic button, which stops all Net activity with one click, much like ZoneAlarm's similar feature. NPF 2003 also blocks banners and pop-up and pop-under ads; it displays a Security Monitor (a miniwindow on the desktop that offers access to all of Firewall's features); and the app now includes a graphical mapper that shows the location of intruding computers and hackers. NPF 2003 has also improved its alerts, providing more information on each alert's meaning and providing hints on how to combat such attacks.
NPF 2003 passed the ShieldsUp and Port Scanner tests with ease. Using another computer, we sniffed the Internet for our test computer, but NPF 2003 blocked every attempt to gain entry and cloaked every port. This is comparable to the results of ZoneAlarm Pro and McAfee Firewall. See CNET Labs' tests for more details.
Symantec's online support remains superb; simply click through a series of online forms to find a solution in the support database or search through user-submitted queries--a neat feature that more companies should offer on their tech-support sites. You can also e-mail tech support for free, although you have to click through several screens to reach the point where you can post a message. Symantec claims that it answers most queries by the end of the next business day; ours were answered in a few hours. Telephone support costs a small fortune: $30 per question or $3 per minute.
At $50, NPF 2003 is pricey for a firewall. Its saving grace: a $20 mail-in rebate both for Symantec product owners and users of McAfee, ZoneLabs, and BlackIce PC Protection firewalls. However, we recommend either paying a bit more to get everything included in Norton Internet Security 2003 or spending nothing at all for ZoneAlarm 3.0