DonationCoder.com Forum

Main Area and Open Discussion => Living Room => Topic started by: Carol Haynes on October 03, 2006, 06:00 PM

Title: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 03, 2006, 06:00 PM
You'd think I would learn ...

I decided to update Outpost to the new version 4. A number of issues ...

1) It is a CPU hog - it averaged around 50% CPU usage on my system, frequently staying above 90% for periods, and rarely dropping below 25%

2) Slowed down system boot (even more than 3.51 which is bad enough)

3) If you use the new 'secure' mode install you face a never ending barrage of prompts (4 or 5 a minute sustained on my system) which make doing anything useful just about impossible. (I had already checked for spyware and viruses etc prior to installing and my system is clean). I suppose not allowing your system to do anything at all without explicit permission (even when most users, including me, don't understand what 90% of the prompts actually mean).

4) It didn't uninstall cleanly - and I have had the devil of a job to reinstall version 3.51 !!

All in all I would suggest avoing version 4 until they have got rid of the gremlins. The Outpost user forum is also populated with complaints about the new version!
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: mouser on October 03, 2006, 06:01 PM
at least they are consistent..

im using v3 and i guessed this would be the case so i haven't even considered installing v4 and won't for a long time.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: JeffK on October 03, 2006, 07:54 PM
The lack of proper support for Windows XP Fast User Switching prevents me from using Outpost despite having a 2 year licence (which to be fair I got at a great discount through DonationCoder.com).  I sense an air of defensiveness whenever I mention the issue to Outpost afficionados, and no doubt it is a superior firewall.

I have this brilliant DVD player at home.  It does everything a DVD player could do.  The only problem is it is so complicated my wife and my daughter can't use it.  I have this brilliant firewall at home...
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: lanux128 on October 03, 2006, 09:01 PM
i had the same problems with ZoneAlarm until i turned off the auto-updates & reminders after i had down-graded to a lower version.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 04, 2006, 04:31 AM
It is also worth noting that Outpost version 4 will not allow disk defragmenters to move its files (self protection) or registry utilities ! You will have to disable Outpost before using these tools.

See http://www.outpostfirewall.com/forum/showthread.php?t=18611
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: tinyvillager on October 04, 2006, 04:44 AM
It is also worth noting that Outpost version 4 will not allow disk defragmenters to move its files (self protection) or registry utilities ! You will have to disable Outpost before using these tools.

See http://www.outpostfirewall.com/forum/showthread.php?t=18611

That's nice to know,so Outpost 4 is pretty much worthless and a complete pile of crap by that knowledge alone.This is what happens when a firewall tries to be everything,anti-virus,spyware,etc.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: JeffK on October 04, 2006, 04:51 AM
I think as a firewall, Outpost is regarded very highly because it is very secure and very configurable.  And this is probably one software type where functionality cannot be sacrificed for ease of use or some quirkiness.  I still like Kerio (now Sunbelt) and if ZA doesn't live up to expectations and Outpost still hasn't got the FUS I'll probably go with that.  The problems with new releases of Outpost seem to be an issue but some users are finding it OK and it has such a big userbase now that problems are very quickly identified and fed back IMHO.

Jeff
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: tinyvillager on October 04, 2006, 04:57 AM
I still got a license for Sunbelt Kerio firewall,i used to get bsod's though,maybe i'll try it again i've been hearing good things about Comodo Firewall,at least on the wilders forums. :-\
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: mouser on October 04, 2006, 09:36 AM
just a word in support of outpost - v4 actually looks good to me in terms of features; i played with it on a vmware and i will be upgrading once it is stable, so i really do still like it.  but agnitum seems to take a long time to make their new releases stable so i'm waiting until a few rounds of bug fixing before upgrading.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 04, 2006, 09:49 AM
It is also worth noting that Outpost version 4 will not allow disk defragmenters to move its files (self protection) or registry utilities ! You will have to disable Outpost before using these tools.

See http://www.outpostfirewall.com/forum/showthread.php?t=18611

That's nice to know,so Outpost 4 is pretty much worthless and a complete pile of crap by that knowledge alone.This is what happens when a firewall tries to be everything,anti-virus,spyware,etc.

The problem doesn't arise from feature bloat - actually I think it has a pretty good feature set and at least it is easy to remove anything you don't want (such as the AntiSpyware plugin). The problem arises from the new self protection feature - which is a good idea but it does need the possiblility of declaring safe applications (such as Perfect Disk) to allow access to its files. As it stands modifying its files (including their location on the disc) and its registry entries are not allowed. This is potentially a good feature as it means you can always rely on non infiltration intot he firewall software.

I suppose the simple solution in Perfect Disc and DiskKeeper (to name but two) is to declare the Outpost folder as excluded from any defragmentation.

I presume Agnitum will eventually get to sorting a sensible solution.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Lashiec on October 04, 2006, 10:01 AM
What's happening lately with security software? All newer versions are giving serious problems to users. Do they test the programs thoroughly or what?
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: NeilS on October 04, 2006, 10:50 AM
As it stands modifying its files (including their location on the disc) and its registry entries are not allowed. This is potentially a good feature as it means you can always rely on non infiltration intot he firewall software.

I suppose the simple solution in Perfect Disc and DiskKeeper (to name but two) is to declare the Outpost folder as excluded from any defragmentation.

Hi Carol,

When you say "modifying its files ... are not allowed", does this mean that it effectively returns some kind of disk write error when a program tries to write into the hard disk sectors occupied by Outpost files? I can see that being potentially catastrophic, although I'd hope the better degraggers like PerfectDisk/Diskeeper can cleanly "back out" of a sequence of moves when this happens. I don't think I'll be volunteering to prove that out though. :)

I think self-protection is a good move overall (although no solution is immune to attack), but it sounds like they are quite happy to let their customers find out if it causes any serious problems, which I find bizarre for a security application.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 04, 2006, 11:14 AM
I don't know how it works since I have had to uninstall it.

I did get a response from Agnitum tech support though ...

They asked for further detail such as dumps etc. (which I couldn't supply as I had already explained to them that I had found it necessary to remove the software) and their final response is:

Dear Carol Haynes,

Thank you for e-mail.

Sorry, but we are unable to give you any advice as we can't find out
the reasons of the problem.

best regards,
Anastassia,
Agnitum Support Team
www.agnitum.com/support/
Support Service Rate
www.agnitum.com/support/supportrate.php
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: chrisclu on October 04, 2006, 10:23 PM
Actually works great.  I've been using Outpost since pre version 1 and couldn't be happier.
Don't know about your defrager but windows defrager is fine on my system. Of course I put defrag.exe in the antileak exclusion list.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 05, 2006, 04:22 AM
Are you using version 4 ? The aritcle I quoted was from Agnitum and they state that in version 4 defragenters will not work properly and you need to disable Outpost 4 before running defragmenters and registry utilities.

The thing I don't understand is if self protection is supposed to stop you altering files, storing extra files in the program folder and even stop you physically moving files in defragmentation - how come you can do it when you disable Outpost - and it isn't undone when you restart it ?
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Black Mamba on October 05, 2006, 04:24 AM
Can someone recommend a good and stable version 3.x of Agnitum?

And maybe a link to the installer too since I can only find the current version on Agnitum webpage.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: NeilS on October 05, 2006, 05:44 AM
The thing I don't understand is if self protection is supposed to stop you altering files, storing extra files in the program folder and even stop you physically moving files in defragmentation - how come you can do it when you disable Outpost - and it isn't undone when you restart it ?

Interesting point - assuming Outpost records which sectors of the hard disk its files use, it should notice that they have changed when you re-enable it after a defrag (assuming they do change, of course) and notify you (just in case you weren't doing a defrag). Even if it doesn't notify you, it certainly has to re-record the sectors it's using, otherwise it will be protecting the wrong bit of the disk (which could be pretty disasterous). I hope that's not one of the outstanding bugs.  :o

I'm not sure that they're likely to implement an undo feature for when the file positions do change. For a start, that will undo part of your defragger's work, which I'm sure a lot of people will dislike, and implementing the undo would probably take them halfway towards their own defragger implementation, which might be a bit much for a firewall app.


Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: chrisclu on October 05, 2006, 03:04 PM
Yes I am using version 4 and I just did a defrag waiting to make this reply.  Sorry I can't figure out what is different in our systems. I always have the latest beta as I am one of the testers but the last beta is the release version.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 05, 2006, 03:40 PM
Yes I am using version 4 and I just did a defrag waiting to make this reply.  Sorry I can't figure out what is different in our systems. I always have the latest beta as I am one of the testers but the last beta is the release version.

Well this is what it says ...

Known Issues:

   1. Outpost's Self-Protection will block any action with the potential to affect Outpost, including copying files into the Outpost program folder or relocating files (including disk defragmenters and registry/file cleanup utilities). There is currently no way to specify exceptions for trusted programs but Self-Protection can be disabled temporarily to allow a specific action. Users running other security software that controls file/registry access may prefer to configure this to cover Outpost's configuration instead.

taken from  Outpost 4.0 - What to Expect (http://www.outpostfirewall.com/forum/showthread.php?t=18611)

I haven't tried defragging when it is running so I can't say what happens here - but presumably there is some effect if you run a defragmenter while Outpost 4 is loaded otherwise it wouldn't be loaded as a known issue ???
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: tinyvillager on October 11, 2006, 06:22 AM
Can someone recommend a good and stable version 3.x of Agnitum?

And maybe a link to the installer too since I can only find the current version on Agnitum webpage.

A little late on the response but a response none the less.

http://www.oldversion.com/program.php?n=outfirewall

Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: tslim on October 11, 2006, 10:24 AM
Can someone recommend a good and stable version 3.x of Agnitum?

And maybe a link to the installer too since I can only find the current version on Agnitum webpage.

A little late on the response but a response none the less.

http://www.oldversion.com/program.php?n=outfirewall



I am using "Outpost Firewall Pro ver. 3.0.557.5918 (437)"
It is the last ver which allows change to preset.lst and is stable (at least for me)

Due to the encryption of preset.lst, for Ver 3.5xxx, ***"disabling DNS client service to prevent unauthorized applications from calling home" is impractical if not impossible.

I am lucky that I hold a lifetime license of outpost pro, i.e. I can afford a long wait.  Agnitum's Outpost Pro ver 3.5xx is no other than a big letdown simply because I can't compromise the *** for any new feature they have added.

And now I heard about ver 4 which brings the *** back (in a new way), but my past experience tells me, DO NOT install a new ver of Agnitum Outpost Pro unless it is a release (shortly after a long-waited one) for patching purpose. I have fallen victim twice in the past for Agnitum's flawed installation set, they both took me days to rebuild the firewall's settings from scratch...
Trust me, Agnitum either has no QA department or their QA team has zero knowledge in one crucial area - how to prepare a working installation set of their firewall - especially one which can properly upgrade old version for existing users.

The fundamental conditions to be a happy user of Outpost Pro are:
1) Avoid installing a major version (a long-waited one)
2) Forget totally about Outpost Pro's online "Automatic update", never ever put in any hope that it will work.

Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: mitzevo on December 03, 2006, 12:52 PM
You can't please every one..  ;D
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Lashiec on December 05, 2006, 10:48 AM
Lesson for the future: Install a new version of Agnitum Outpost once a newer version got released ;D

So, Carol, Outpost 4 will run wonderful after Outpost 5 gets the release.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on December 05, 2006, 01:48 PM
That's the conclusion I reached - their response "We don't do refunds" - even when I have a new subscription with a full year still to run. I am tempted to contact my credit card company on the basis that the product is "not fit for purpose" ... at least on my machine.

The problem with running old versions is that the update process wants to install new software before applying detection pattern file updates - so you may have a subscription but you can't get any benefits unless you update to the latest version of the software (or at least the same revision). If I install version 3.5 on my machine now everytime it checks for updates it wants to install version 4 - and when I say no I don't get any updates at all.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Curt on December 05, 2006, 06:04 PM

I decided to update Outpost to the new version 4.

It has been a surprise to me to read this thread, and not a pleasent one.
I have been using Outpost since 2.5 and is very happy with it. I have no complaints at all. But of course I had to visit the users forum, in order to learn how to set up Outpost. Time well spent.

Do you trust your various apps on your PC? If you do, you should take some time to add them to Tools > Application... > Trusted applications or Partially allowed applications (specifying in and out -going traffic rules). This way Outpost will work 'smoothly', only asking if this or that change is to be trusted, when a program has been updated.

And NO, you do not have to exit Outpost in order to turn off the self-protection. Remove check-mark in Tools > Enable selfprotection.

I shoul think a bunch of geeks like you all,  ;) would know how to appreciate this very fine tool; the finest firewall you can have for a home PC.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on December 06, 2006, 02:53 AM
Curt the biggest problems I have with Outpost 4 are almost constant system instability. This occurs even on a fresh install of Windows with only hardware drivers present. On my system this manifests itself as random reboots (no error logging just whoosh the system restarts) causing you to lose anything you were doing at the time, possible damage to anyfiles open and possible registry corruption if settings have not been updated fully at the time. This has even happened to me when I simpy click a hyperlink in Firefox !! Without Outpost the system is 100% stable - within minutes of installing I am suffering with these problems again.

Before you ask I don't seem to have any hardware that is malfunctioning or likely to be so whacky as to cause the issues: GeForce graphics, Soundblaster audio and a Hauppauge TV card + a few USB devices: Canon printer and scanner, Seagate USB hard disk and a USB keyboard.

Add to that a big system performance hit and the fact that I can't use my network storage at all with Outpost installed (even when it is not even running! I have tired disabling it from the tray and exiting it from the tray - plus I have made rules that allow every bit software, including DLLs, related to network storage have full network access and opened the port fully that Netgear suggest and it still doesn't work - no Outpost, no problems at all) and I think this version has some serious flaws.

I too have used it since version 2.5 and had similar issues when version 3 was released (as did most users). It does a company's reputation no good that the accepted advice is wait 6 months before installing any new release because their testing is so poor and each release is chock full of bugs and issues.

For me this is one step beyond the pale and Agnitum have lost a customer - particularly as they seem incapable of taking resposnsibilty in each release for the widely and well documented troubles they seem to cause.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Curt on December 06, 2006, 05:37 PM
Curt the biggest problems I have with Outpost 4 are almost constant system instability.

Some troubles!! No wonder you're gone!  >:(
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Lashiec on December 11, 2006, 11:47 AM
A new review of firewalls could come along... The present one is not exactly comprehensive, and it mostly praises Outpost (no offense here, at the time of the review it was the best option considering all things implicated). And the firewall world suffered a convulsion after th ;D ;De Kerio and Sygate debacle... at that time I thought the only free alternative for the future would be ZoneAlarm, but then Sunbelt Software came forward, and people discovered Comodo and netVeda, and everything went for the best ;D

I'm waiting for the results of the test that Scot Finnie is conducting on his own computers. At some point in the future, maybe I would post some mini-reviews since finally it seems that I'm getting my new computer as a Christmas present... complete with an Internet connection! ;D, so the firewall is going to be a must, and probably I would test all free ones, and maybe some of the paid, like the same Outpost or the full version of ZoneAlarm. I'll keep you informed :D
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: mouser on October 14, 2007, 07:51 AM
I finally upgraded to outpost v4, and some of the features are really nice.

However, it frequently eats up half my cpu cycles for no apparent reason and drags my computer to a virtual stand still.  not cool.  i've just about had it with outpost and i'm ready to find something else.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: KenR on October 14, 2007, 09:00 AM
I finally upgraded to outpost v4, and some of the features are really nice.

However, it frequently eats up half my cpu cycles for no apparent reason and drags my computer to a virtual stand still.  not cool.  i've just about had it with outpost and i'm ready to find something else.

Hey Jesse,

How long have you been using the software? I found it did this initially after install, but then stopped and did not do it again. I have been happily using it for some time without any problems. I am often in the process manager box and can tell you that most of the time it is using between 2-5% of cpu cycles. Maybe give it a while longer and see if things settle down.?

Ken
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Carol Haynes on October 14, 2007, 09:54 AM
I have tried Outpost on 3 different computers - with different hardware on each and on all of them I get random reboots (ie. screen goes black and the next thing you see is the BIOS POST screen and windows starts up.). It is almost impossible to track this sort of problem down because there are no error messages or codes, and it invariably happens when you have been doing something for a couple of hours and have forgotten to save recently.

The only solution I have found is to uninstall Outpost and then my systems are rock solid.
Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: Sentinel on October 14, 2007, 09:55 AM
I'm fully paid up with Outpost for the next 3 years, but again, don't use it any more...  Which in itself should value what else I am about to say.  ;)

It really is a great firewall, despite the annoying quirks and limitations, but it seems the world is heading more towards HIPS.  After all, why have a firewall when you cannot trust what *you* are running?  Sadly the world of computing threats has adapted and changed whilst often big business has not - Who can expect anything else?

A firewall's significant strength is protecting you from outsiders.  As  threats have changed, firewalls have changed from doing what they are meant to do well, to doing that, plus all other protectative measures as a bolt-on.  From a firewall vendors viewpoint this makes sense, as they've already spent the time, effort and finance in ensuring their product does the job intended, then why not take that same core and add extra protection?

This in itself is no bad thing, but it is often out of the reach, application, remit and design methodology of the original firewall application.  This often leads to a frankenstein software model (I won't list any current products as pretty much all software firewall vendors are guilty of this), due to the misplaced nature of the true threat to the end user.

The unfortunate outcome is over half a dozen drivers (in the case of Outpost at the very least), that you cannot guarantee protection from, except from what comes into and goes out of your network via common methods, and a feeling of general bloatedness and slothfulness in your system coupled with general confusion and distain with all.  The sad thing is, if you haven't ever been compromised, but have seen the downside to apparent computer security then you may only a negative viewpoint to computer security as a whole from what you have experienced from your chosen firewall product.

Negative, yes?  But that's my opinion at least.  The modern firewall has a place and generally will protect you, but will you be happy with the price you have to pay in it doing so, considering it is far from a certainty?

Perhaps at this point I should recommend alternatives?  Yes I should, but this in itself shows just how far we have to go between the current Firewall and HIPS currently available.

If you really are interested in investigating the current HIPS available at the moment, the general concensus is that the following are the strongest available:-

http://www.proactive-hips.com/
http://www.syssafety.com/

If you have a hardware firewall between you and the Internet at present you may find no better means of security.  In the meantime it is sad to say that security if far from a certainty.



Title: Re: Aghh -- they've done it again ... avoid Agnitum Outpost 4 (at least for now)
Post by: mouser on October 14, 2007, 10:01 AM
Personally I love the basic approach of Outpost, and i just like almost everything about it and i think they've set the high bar in terms of logging, interface, etc.  I just wish they would concentrate a little more on stability and performance.