The smartest firewalls use a three-part strategy. They automatically allow access for known good programs and delete known bad ones. When a program doesn't fit either category, the firewall keeps an eye on its behavior and allows access as long as it doesn't try anything sneaky. Clearly this takes a lot more programmed-in intelligence than the simple ask-the-user plan, but it's definitely a better tactic—both more effective and pleasanter to deal with. Norton Internet Security 2008 and Panda Internet Security 2008 are two good examples of this approach in action.
展开▼
机译：最聪明的防火墙使用三部分策略。它们自动允许访问已知的良好程序，并删除已知的不良程序。当程序不适合任何一个类别时，防火墙会密切注意其行为并允许访问，只要它不尝试任何偷偷摸摸的事情即可。显然，这比简单的“询问用户”计划需要更多的编程智能，但这绝对是一种更好的策略-既有效又轻松。 Norton Internet Security 2008和Panda Internet Security 2008是这种方法的两个很好的例子。
展开▼
