Windows Firewall enough??

Zone Alarm is one of the best

"FERRANTE" wrote in message
...
Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark

Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark

On Sat, 21 Feb 2009 15:50:58 -0600, FERRANTE
wrote:

Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?


Two points:

1. Never run an "additional" firewall. If you run two software
firewalls, you achieve no extra protection, you incur the extra
overhead of running two firewalls, and you run the risk (probably
small, but not zero) of conflicts between them. Decide which one you
want and run that one only.

2. The Windows firewall is fine, and there is no real need to run a
different one instead.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

"FERRANTE" wrote in message
...
Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark

Don't run two software firewalls, since you use the word "additional".
This is only going to give you problems. Use one or the other, never both.
The same applies to anti-virus software.

A good place to start for another layer of protection, if you don't have one
now, is using a router and blocking specific ports on it. Routers are not
expensive and are very easy to set up. Spend a little time going through
the options and learn what they do.

You'll very likely get one with wireless, and the first things to do with
the wireless are to change the SSID, which is the name you'll see when your
wireless computer searches for available networks, and turn encryption ON.
If you leave the SSID at the default, it happens that a neighbor buys the
same model, doesn't change their SSID either, doesn't turn encryption on,
and WIndows can't tell *which* one to connect to, so it picks the easier
one. It may connect to their network, which means that your network
resources are not available to you, but anything shared on your system is
available to them. This can also result in you being unable to send mail,
if they use a different ISP.

HTH
-pk

Not an easy question to answer because what's known as firewall software
these days is typically much more than 'just' a firewall.

Windows Firewall is an 'inbound' firewall. In essence, it hides your
computer from other computers on the internet. No other computer on the
internet knows your computer exists, unless you tell them. For example,
when you request your email you are telling your provider's SMTP server
where to find your computer.

Third-party firewalls are also 'outbound' firewalls. They will alert you
whenever your computer wants to connect to another computer on the
internet, and ask you to approve or deny the connection. (Either you or
the program will setup rules for programs you trust, so you don't get
prompted /every/ time.) This is valuable protection: If malicious
software installed on your computer tries to connect with the internet -
perhaps to send your personal information to a crook thousands of miles
away - there's a good chance you'll know about it, and you'll be able to
prevent the connection from being made.

In addition, by reviewing the logs your firewall keeps, which list the
details of every outbound connection, you'll know if your computer has
been communicating with remote computers you don't recognize.

As I mentioned, third-party firewalls can add lots of other functions as
well, like phishing protection, that you might find valuable.

All this protection can make your computer run more slowly, but that's
the price we pay for defending ourselves against all the dangers on the
internet.
---
Leonard Grey
Errare humanum est

FERRANTE wrote:
Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark

"FERRANTE" wrote in message
...
Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark

The built-in firewall does not do much...
a 3rd party firewall will probably be a bit better.

PC Tools Firewall seems to be pretty decent.

When it's installed, it will automatically disable the Windows firewall...
which is the correct thing to do

In article ,
lid says...
Windows Firewall is an 'inbound' firewall. In essence, it hides your
computer from other computers on the internet. No other computer on the
internet knows your computer exists, unless you tell them. For example,
when you request your email you are telling your provider's SMTP server
where to find your computer.


Except that Windows Firewall allows applications to create HOLES as well
as vendors setup that include an exception (HOLE) for File and Printer
sharing in many cases.

Unless you remove all exceptions you are not protected.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

Yup, that's correct. I got the impression that the OP wanted a
fundamental introduction to firewalls. There are TONS of details.
---
Leonard Grey
Errare humanum est

Leythos wrote:
In article ,
lid says...
Windows Firewall is an 'inbound' firewall. In essence, it hides your
computer from other computers on the internet. No other computer on the
internet knows your computer exists, unless you tell them. For example,
when you request your email you are telling your provider's SMTP server
where to find your computer.


Except that Windows Firewall allows applications to create HOLES as well
as vendors setup that include an exception (HOLE) for File and Printer
sharing in many cases.

Unless you remove all exceptions you are not protected.

"FERRANTE" wrote in message
...
Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark


Combined with common sense, the Windows firewall isn't too bad..

You could try this one.. Comodo

http://www.personalfirewall.comodo.c..._firewall.html


--
Mike Hall - MVP

Mike's Window - My Blog..
http://msmvps.com/blogs/mikehall/default.aspx

A good place to start for another layer of protection, if you don't have one
now, is using a router and blocking specific ports on it. Routers are not
expensive and are very easy to set up. Spend a little time going through
the options and learn what they do.

Patrick,
I am not as knowledgeable as many of you, but I do have a wireless
router, but I have the "wireless" turned off and it is "wired." What I
have is the D-Link D_-524
(http://reviews.cnet.com/routers/d-li...-30839580.html)
I have had it for a few years. Please look at the above link at the
pros and cons. It says the DI-624 is better and faster. Should I
replace this or is there a better one to have or is what I have good
enough?

Thanks,
Mark

Third-party firewalls are also 'outbound' firewalls. They will alert you
whenever your computer wants to connect to another computer on the
internet, and ask you to approve or deny the connection. (Either you or
the program will setup rules for programs you trust, so you don't get
prompted /every/ time.) This is valuable protection: If malicious
software installed on your computer tries to connect with the internet -
perhaps to send your personal information to a crook thousands of miles
away - there's a good chance you'll know about it, and you'll be able to
prevent the connection from being made.

Leonard,
In the past when I have tried to use software such as Zone Alarm of
Comodo, as programs starts up, the software asks for permission to the
process to be completed. However, often time when asking, all you see
are numbers or letters, almost cryptic, and I cannot tell which
program is wanting to access the Internet. If I refuse, I may be
hurting myself by denying all AV features or other useful programs
from functioning fully. So I am often lost as what to do.
In addition to using Esset's NOD 32 as my AV, and various spyware
programs I run a few times a week, my only real protection as of this
writing is my router and Windows XP firewall.
With the benefit you outlined above in using a third-party firewall,
which would you recommend as being good yet user-friendly? Someone
mentioned Zone Alarm? Naturally free would be my first choice, but not
if a paid program was much better.

Mark

"Good" and "user-friendly" mean something different to everyone. Why not
try a few and see what's best for /you./ All the major third-party
products have free trials. The only 'trick' to remember is that you must
completely uninstall one product before trying another.

Firewalling is complex, and there's no way to make it easy to
understand. Some firewalls will prompt you more, some less. Often the
prompts will appear cryptic. With study and experience, you'll learn
better how to deal with them.

P.S. In the beginning you'll make lots of mistakes. We all do.
---
Leonard Grey
Errare humanum est

FERRANTE wrote:
Third-party firewalls are also 'outbound' firewalls. They will alert you
whenever your computer wants to connect to another computer on the
internet, and ask you to approve or deny the connection. (Either you or
the program will setup rules for programs you trust, so you don't get
prompted /every/ time.) This is valuable protection: If malicious
software installed on your computer tries to connect with the internet -
perhaps to send your personal information to a crook thousands of miles
away - there's a good chance you'll know about it, and you'll be able to
prevent the connection from being made.

Leonard,
In the past when I have tried to use software such as Zone Alarm of
Comodo, as programs starts up, the software asks for permission to the
process to be completed. However, often time when asking, all you see
are numbers or letters, almost cryptic, and I cannot tell which
program is wanting to access the Internet. If I refuse, I may be
hurting myself by denying all AV features or other useful programs
from functioning fully. So I am often lost as what to do.
In addition to using Esset's NOD 32 as my AV, and various spyware
programs I run a few times a week, my only real protection as of this
writing is my router and Windows XP firewall.
With the benefit you outlined above in using a third-party firewall,
which would you recommend as being good yet user-friendly? Someone
mentioned Zone Alarm? Naturally free would be my first choice, but not
if a paid program was much better.

Mark

FERRANTE wrote:
Is there really a need for an additional firewall besides the one that
comes with windows? If so, of the free ones, which do most consider as
a very good one?

Thanks,
Mark


WinXP's built-in firewall is usually adequate at stopping incoming
attacks, and hiding your ports from probes. What WinXP SP2's firewall
does not do, is protect you from any Trojans or spyware that you (or
someone else using your computer) might download and install
inadvertently. It doesn't monitor out-going traffic at all, other than
to check for IP-spoofing, much less block (or at even ask you about) the
bad or the questionable out-going signals. It assumes that any
application you have on your hard drive is there because you want it
there, and therefore has your "permission" to access the Internet.
Further, because the Windows Firewall is a "stateful" firewall, it will
also assume that any incoming traffic that's a direct response to a
Trojan's or spyware's out-going signal is also authorized.

ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even the commercially
available Symantec's Norton Personal Firewall is superior by far,
although it does take a heavier toll of system performance then do
ZoneAlarm or Sygate.

Having said that, it's important to remember that firewalls and
anti-virus applications, which should always be used and should always
be running, while important components of "safe hex," cannot, and should
not be expected to, protect the computer user from him/herself.
Ultimately, it is incumbent upon each and every computer user to learn
how to secure his/her own computer.


--

Bruce Chambers

Help us help you:
http://www.catb.org/~esr/faqs/smart-questions.html

http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

In article ,
says...
WinXP's built-in firewall is usually adequate at stopping incoming
attacks, and hiding your ports from probes.


Bruce, you forgot to mention that many vendors ship system that have
Windows File and Printer sharing exceptions, and then there are bunches
of apps that include exceptions without the user really understanding
the massive hole they put in the Win firewall.

Windows firewall does little to alert/warn the user.

A NAT Router would provide a LOT better protection for a user.

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

Glad to help. It's very frustrating in the beginning when you get these
geeky pop-ups and don't know what the heck they mean. In time you'll
understand better. For now, try to find a firewall program that you feel
comfortable with.

You'll probably go through a few of them before you settle on one.
That's fine.
---
Leonard Grey
Errare humanum est

FERRANTE wrote:
---
Leonard Grey
Errare humanum est

Thanks for your help, Leonard!

Mark