Windows Forum
Hello,
I have at home four computers connected to an ADSL modem through a Linksys router with its own hardware firewall.
My question is : do I need have another firewall such as Zonelabs' installed on each computer?
Would it add any benefit?
Thank you for your help
by thechas
Which Linksys router?
The one I have was advertised as having a firewall. In reality, my router has a feature that when enabled restricts access to only computers running Zone Alarm Pro.
Anyhow, even if your router has a hardware firewall built in, I would still install Zone Alarm on each of your PCs.
If you share files or printers, you will need to set Zone Alarm to allow the other PCs to access the PC with the printer or files.
Chas
by nhiep_nguyen
Poster rated this answer.
It helps me as an experienced user's opinion but I would like to have elaborate reasons to install or not to install software on top of the hardware firewall. My Linksys router is BEFW11S4. I do not accept the answer just to have a chance to have more of the whys.
Thank you
by rewrite
It's really up to you. It wouldn't hurt to have a software firewall on each pc in addition to the router firewall. The only thing is that you will have to add the internal subnet on each pc's firewall to allow sharing if you want the pc's to share resources (like chas said).
Cheers.
RW
by nhiep_nguyen
Poster rated this answer.
I am looking for reasons why I should or shouldn't add software firewall (which as anything added adds complexity to my systems) for security not because it wouldn't hurt. Thanks for your comment anyway
by nhiep_nguyen
My router is Linksys' BEFW11S4.
I also thought, that to be on the safe side, to have the ZoneAlarm software firewall on each computer but what are the real benefits, since the more complex the system the more hassle there is?
What is basically the working principle of the hardware firewall?
Thank you for your help
by wlbowers
You are looking at a software firewall as a one way situation.
A firewall not only keeps the creeps out it keeps the what might get in from calling momma.
If you hit a site like I did the other day, while researching a possible rogue file, I was flooded with garbage. The antivirus and firewall did its job.
I was instantly alerted to 6 or 7 trojan infected files. The firewall alerted me to a file trying to get out. I told it to deny the attempt. the AV requested that I reboot to finish deleting the files it caught.
It took me almost 2 hours to purge my system.
This happen while I was working on a customers infected computer in the shop.
All of this started by just accessing the site from a Google search.
There is no telling what information was trying to go out or what it was trying to download.
All of this happen in the blink of an eye.
I use CA's etrust Armor. You can get it free for the first year.
http://www.my-etrust.com/microsoft/
Detects and cures 100% of viruses
Auto-updates
Stops hacker attacks
Blocks unknown access
Stops pop-ups and controls cookies
Easy to configure firewall
Lee
by nhiep_nguyen
Poster rated this answer.
Thank you
by cg it
Basic security design for comptuter systems be it a SOHO or a business begins with determining what needs to be secure, how vital or important the information is, who needs access. Once those parameters are defined, then the known threats to such security can be identified and specific measures taken to prevent compromise.
Designers of security for any computer system or network approach firewalls as the first step in a layered solution.
The hardware "router" which seperates the private network from the public Internet is a first line of defense. A hardware firewall "masks" or "stealths" ports from hacker probing externally. If they can't find a port to exploit or attack, they cant exploit or attack. Firewall also blocks ICMP network utilities such as ping [which goes along with external port probing.
by cg it
A hardware firewall also provides Network Address Translation where the internal network addresses are hidden and only your public address can be seen [though a skilled hacker intent on breaching your network can capture packets, strip away headers and find the internal addresses as well as MAC address of the originating computer].
Adding a "software" firewall such as McAfee, Symantec, ZoneAlarm, onto client computers provides an additional layer of defense. With a product like Symantecs Norton Personal Firewall,not only are ports "stealthed" on the LAN but applications that are Internet enabled are monitored. Something a consumer level hardware firewall doesn't do.
A third level of defense which isn't a firewall product but is necessary for any secure system is Windows NTFS file system where access to a particular folder can be controlled.
One must always keep in mind that there is an inherent "marketing" ploy to get comsumers to buy products. That ploy is to create a "need" then offer a solution to that need. In todays world, no one should be connected to the internet without some type of firewall protection. Consumers being who they are either won't buy something they dont' understand or costs more than they think the product is worth . Because of the global threat of hackers using unprotected system to force their way into banks, govt institutions, large business, Microsoft, with SP2 virtually forced everyone who runs Windows XP to have some form of firewall protection.
by cg it
by nhiep_nguyen
Poster rated this answer.
That kind of explanation is what I was looking for. Thank you for your comments
by nhiep_nguyen
by nhiep_nguyen
by cg it
by cg it
by nhiep_nguyen
Poster rated this answer.
by cg it
by nhiep_nguyen
Poster rated this answer.
by nhiep_nguyen
This discussion is closed to new replies.
Sort by Trending