network connection protection

  • Thread starter Thread starter RB
  • Start date Start date
R

RB

Is the XP firewall worth using? I'm behind a switch/router, so nothing can
easily get into my pc. But, there's the old argument that you want to know
what's getting out of your pc. So, does the XP firewall give us any
capability in that regard?
 
| But, there's the old argument that you want to know
| what's getting out of your pc. So, does the XP firewall give us any
| capability in that regard?
|
|

No. None

--
D

I'm not an MVP a VIP nor do I have ESP.
I was just trying to help.
Please use your own best judgment before implementing any suggestions or
advice herein.
No warranty is expressed or implied.
Your mileage may vary.
See store for details. :)

Remove shoes to E-mail.
 
XP's ICF blocks only incoming attacks very effectively. However, if there is
any trojan planted in the system, ICF won't monitor it. In this case, an
application based firewall such as ZoneAlarm or Sygate would do the trick.
It asks you which application you want to allow access to the internet. So,
if a trojan attempts to access the internet (outgoing), you can easily trace
it with an app based firewall.

We can expect more in XP SP2 ICF ;)
http://www.eweek.com/article2/0,4149,1381520,00.asp

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k

-------------------------------------------
Computer viruses: description, prevention, and recovery:
http://support.microsoft.com/?kbid=129972
-------------------------------------------

Is the XP firewall worth using? I'm behind a switch/router, so nothing can
easily get into my pc. But, there's the old argument that you want to know
what's getting out of your pc. So, does the XP firewall give us any
capability in that regard?
 
Greetings --

If your switch/router has NAT capability, you're about as safe as
WinXP's built-in firewall could make you.

WinXP's built-in firewall is fine at stopping incoming attacks, and
hiding your ports from probes. It doesn't give you any alarms to tell
you that it is working, though. What WinXP also does not do, is
protect you from any Trojans or spyware that you might download and
install inadvertently. It doesn't monitor out-going traffic at all,
much less block (or at least ask you about) the bad or the
questionable out-going packets.

ZoneAlarm, Kerio, or Sygate are all much better, and are much more
easily configured, and there are a free versions of each readily
available. Even Symantec's Norton Personal Firewall is superior,
although it does take a heavier toll of performance then do ZoneAlarm,
Kerio, or Sygate.

Even good hardware firewalls (and NAT-capable routers) do nothing
to protect the user from him/herself. Almost all spyware and many
Trojans and worms are downloaded and installed deliberately (albeit
unknowingly) by the user. So a software firewall, such as ZoneAlarm,
that can detect and warn the user of unauthorized out-going traffic is
an important element of protecting one's privacy and security.

I use both a router with NAT and Sygate Personal Firewall, and
have not conflicts between them.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
In
RB said:
Is the XP firewall worth using? I'm behind a switch/router, so
nothing can easily get into my pc. But, there's the old argument
that you want to know what's getting out of your pc. So, does the XP
firewall give us any capability in that regard?


No. It monitors incoming traffic only. To monitor outgoing
traffic, you need to use a third-party firewall instead. I use
and am happy with the free version of ZoneAlarm.
 
Back
Top