ICF and Security

[Susan]

Small organization just installed new computer with XP
Pro on it. They have no firewall so ICF needs to be set
up and I think Windows Messenger Service disabled too. I
am also new to XP Pro and am wondering about setup of
ICF. I understand Administrator account needs to be first
setup before ICF.

My question is if the Administrator account is set up, is
this going to open the door to complex security rules
that have to be set up to allow one person to use the
computer? Computer is not networked.

 

[Carey Frisch [MVP]]

HOW TO: Enable or Disable Internet Connection Firewall in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;283673&Product=winxp

How to Prevent Windows Messenger from Running on a Windows XP-Based Computer
http://support.microsoft.com/default.aspx?scid=kb;en-us;302089&Product=winxp

HOW TO: Create and Configure User Accounts in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;279783&Product=winxp

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------


| Small organization just installed new computer with XP
| Pro on it. They have no firewall so ICF needs to be set
| up and I think Windows Messenger Service disabled too. I
| am also new to XP Pro and am wondering about setup of
| ICF. I understand Administrator account needs to be first
| setup before ICF.
|
| My question is if the Administrator account is set up, is
| this going to open the door to complex security rules
| that have to be set up to allow one person to use the
| computer? Computer is not networked.

 

[Tom Foolery]

Susan, I was not aware of the need to have the admin account configured
before ICF, and I don't think there are any complex rules governing its
setup. In any case, since ICF is pretty widely viewed as only "better than
nothing at all" your organization might want to consider a more "robust"
firewall arrangement such as ZoneAlarm. Consider the information presented
here:


http://www.techtv.com/products/software/story/0,23008,3338448,00.html

 

[Susan]

Thank you Carey. Please tell me if the XP Pro firewall is
enough or would you recommend buying a firewall?

 

[Bruce Chambers]

Greetings --

WinXP's built-in firewall is adequate at stopping incoming attacks,
and hiding your ports from probes. It doesn't give you any alarms to
tell you that it is working, though. What WinXP also does not do, is
protect you from any Trojans or spyware that you might download and
install inadvertently. It doesn't monitor out-going traffic at all,
much less block (or at least ask you about) the bad or the
questionable out-going packets.

ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even Symantec's Norton
Personal Firewall is superior by far, although it does take a heavier
toll of system performance then do ZoneAlarm or Sygate.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[Susan]

I know about the free versions for home users. I was
inquiring for small local non-profit org. I use Sygate on
home desktop after I got the Blue Screen of Death with
Zone Alarm. KB Q297725 article said to uninstall it. I
know many people like Zone Alarm but I guess I was one of
few who experienced problems.

Thank you for your response.

Susan