Wireless network question...

  • Thread starter Thread starter Carmen Gauvin-O'Donnell
  • Start date Start date
C

Carmen Gauvin-O'Donnell

Hi there! On a wireless home network, does the client computer have to have
a firewall installed if the host computer already has one? Does the wireless
network router (in my case a D-Link) already have one?

Thanks!
Carmen the newbie
 
Hi there! On a wireless home network, does the client computer have to have
a firewall installed if the host computer already has one? Does the wireless
network router (in my case a D-Link) already have one?

Thanks!
Carmen the newbie
Click to expand...

most wireless cable/dsl routers already have it installed, and most use
a 192.168.x.x network, which is private, so it's basically a hardware
firewall which is more secure then a software piece... to find out if
you have the 192 address, go to :
run
type command, press enter
in black msdos box type ipconfig
it will list your ip address assigned, if it shows 192.x.x.x your pretty
much (99.9%) safe..
 
most wireless cable/dsl routers already have it installed, and most use
a 192.168.x.x network, which is private, so it's basically a hardware
firewall which is more secure then a software piece... to find out if
you have the 192 address, go to :
run
type command, press enter
in black msdos box type ipconfig
it will list your ip address assigned, if it shows 192.x.x.x your pretty
much (99.9%) safe..
Click to expand...

I might suggest typing in the run box: cmd /k ipconfig /all

This gets you a command window and runs the ipconfig command all in one go.
the /all parameter makes the output more complete, and covers all network
adapters that are installed. The entire sequence will also be retained in
the run list for future use.
Jay
 
Hi there! On a wireless home network, does the client computer have to have
a firewall installed if the host computer already has one? Does the wireless
network router (in my case a D-Link) already have one?

Thanks!
Carmen the newbie
Click to expand...

Software firewalls do more than NAT. For example I'm also interested
in what programs are trying to get out of my PC. Block and allow. I
have both.
Butterfield
 
The NAT router will be a firewall, though some routers are better then
others in that they are a Stateful Packet Inspection firewall. It will
protect you from unsolicited inbound traffic from the internet. You could
also use a software firewall if you have a need to protect your computer
from other computers on your local network or need to control what
applications can access the internet from your computer which can be useful
if other users use your computer and you do not want them to use file
swapping programs and such. -- Steve
 
Butterfield said:
Software firewalls do more than NAT. For example I'm also interested
in what programs are trying to get out of my PC. Block and allow. I
have both.
Butterfield
Click to expand...

Windows XP SP2 includes this kind of firewall.
 
Thanks for all your input folks! That makes me feel better.

Now, in spite of this protection, would you all recommend I run Zone Alarm
on the host computer anyway (in the "you can never have too much protection"
philosophy?) or could that interfere with the protection I'm getting through
the router?

Thanks again!

C.
 
Mike said:
No it doesn't. It only blocks inbound.
Click to expand...

Oops, you're right. However, it does tell you when a program is acting as a
server and attempting to listen on a port, giving you the option to block.
That's what I was thinking of.
 
Carmen said:
Thanks for all your input folks! That makes me feel better.

Now, in spite of this protection, would you all recommend I run Zone
Alarm on the host computer anyway (in the "you can never have too
much protection" philosophy?) or could that interfere with the
protection I'm getting through the router?
Click to expand...

No - you can run a software firewall on your PC(s) and still be behind a
hardware appliance. Check with the manufacturer's support page to find out
whether your "router" is also a true SPI (stateful packet inspection)
firewall - most are not.

Also - with wireless, you should force WPA or at least 128-bit WEP on the
connection - it is not going to stop someone who is serious about getting
in, but it's better than having an unsecured access point that all your
neighbors can connect to. Also make sure to change the access point's admin
credentials/password.
 
I would load ZA only if you want to monitor programs that are attempting to
connect to the Internet. Otherwise you should be safe with just your NAT
router for blocking inbout requests.
 
Zone Alarm would be fine if you want to try it. It offers great protection
and is easy to configure. It is not as sophisticated as Sygate if you want
to have advanced logging, but Sygate is more difficult to configure. It will
not "interfere" with protection that the NAT router provides though if it
becomes misconfigured you may find that you can not access the internet with
all applications you expect. I personally do not use personal firewalls, but
I am very good about managing virus protection, critical updates, securing
Internet Explorer, using complex passwords, and disabling unneeded services
on my computers. You can use the free Microsoft Baseline Security Analyzer
tool to check your computer for basic vulnerabilities.

Wireless access has it's own challenges to protect your network and it's
data. Be sure to be using at least WEP encryption or if possible PSK [pres
shared key] WPA to encrypt your data which is much more secure than
EP.. --- Steve

http://www.microsoft.com/technet/security/tools/mbsahome.mspx --- link to
MBSA.
 
Carmen said:
Hi there! On a wireless home network, does the client computer have to have
a firewall installed if the host computer already has one? Does the wireless
network router (in my case a D-Link) already have one?

Thanks!
Carmen the newbie
Click to expand...

Thanks again for all your input on this folks... I've taken all your
advice and enable WEP 128 bit, Zone Alarm on the host computer and my
own computer has a firewall provided by my ISP as part of an
anti-virus/spam/firewall package.

The bastards may get me, but by gum, it won't be without a fight! :)

Now if I could just get the printer downstairs to bring my documents to
me upstairs when it's done... this wireless thing would be *perfect*! :)

Carmen
 
Back
Top