ICF -- needed with hardware firewall?

[John Blaustein]

I have a home network:

DSL modem connected to DSL line
SonicWALL 10 connected to DSL modem
Switch connected to SonicWALL
4 PCs connected to switch -- 2 running XP Home, 2 running 98SE

On the two XP machines, is it necessary to enable the Internet Connection
Firewall for the DSL connection, even though I have the hardware firewall?
If so, which Settings should be checked (on)?

When connecting via dial-up, I have ICF enabled. Which of the Settings
should be turned on?

Thank you.

John

 

[PA Bear]

Protect Your PC
http://www.microsoft.com/security/protect/

(Does this really belong in OE6 NG, John?)

 

[Bruce Chambers]

Greetings --

No. WinXP's built-in firewall cannot add any level of protection
to that of a hardware firewall, as it monitors only inbound traffic.

Even good hardware firewalls (and NAT-capable routers) do nothing
to protect the user from him/herself. Again -- and I _cannot_
emphasize this enough -- almost all spyware and many Trojans and worms
are downloaded and installed deliberately (albeit unknowingly) by the
user. So a software firewall, such as Sygate or ZoneAlarm, that can
detect and warn the user of unauthorized out-going traffic is an
important element of protecting one's privacy and security. Most
antivirus applications do not scan for or protect you from
adware/spyware, because, after all, you've installed them yourself, so
you must want them there, right?

I use both a router with NAT and Sygate Personal Firewall, even
though I generally know better than to install scumware. When it
comes to computer security and protecting my privacy, I prefer the old
"belt and suspenders" approach.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[John Blaustein]

Thank you, Bruce. Very helpful info.

John

Greetings --

No. WinXP's built-in firewall cannot add any level of protection
to that of a hardware firewall, as it monitors only inbound traffic.

Even good hardware firewalls (and NAT-capable routers) do nothing
to protect the user from him/herself. Again -- and I _cannot_
emphasize this enough -- almost all spyware and many Trojans and worms
are downloaded and installed deliberately (albeit unknowingly) by the
user. So a software firewall, such as Sygate or ZoneAlarm, that can
detect and warn the user of unauthorized out-going traffic is an
important element of protecting one's privacy and security. Most
antivirus applications do not scan for or protect you from
adware/spyware, because, after all, you've installed them yourself, so
you must want them there, right?

I use both a router with NAT and Sygate Personal Firewall, even
though I generally know better than to install scumware. When it
comes to computer security and protecting my privacy, I prefer the old
"belt and suspenders" approach.


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Bruce Chambers]

Greetings --

You're welcome.

Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH