Keep in mind that almost 80% of security breaches
originate from within the corporate firewall!
PortsLock® is a firewall that offers user-level access controls for Windows NT/2000/XP and Windows 2003 Server. It integrates with the Windows user authentication system and once installed, administrators can assign permissions to TCP/IP connections, just as they would in managing permissions on an NTFS partition of a hard disk. PortsLock lets you control which users can access what TCP/IP based protocols (HTTP, FTP, SMTP, POP3, Telnet, etc.) on a local computer, depending on the time of day and day of the week. You can also set allowed/denied TCP/UDP ports and IP addresses for incoming and outgoing connections. PortsLock is completely transparent to users and only Windows administrators are allowed to set rules. Administrators that are familiar with IPsec, can think of this as a user-specific IPsec configuration, where user A can be allowed access to the web during business hours, but denied FTP traffic and user B can only access sites within the corporate network etc. Additional features include optional traffic auditing (per user setting), remote access and automatic deployment to remote machines.


PortsLock® enhances access control possibilities for system administrators, helps them to build a more secure network environment, and protects corporate networks against attacks from the inside.

With PortsLock® you can:

Block access to the selected TCP/UDP ports for defined users
Set allowed/denied IP-addresses for defined users
Control incoming and outgoing connections for each user separately
Control access to protocols depending on the time of day and day of the week
Monitor TCP/IP activity on remote computers in real-time
Install PortsLock on remote computers without having to physically go to them
http://www.portslock.com/