two firewalls

  • Thread starter Thread starter gilbert
  • Start date Start date
G

gilbert

What are the known issues about using two firewalls? I have Zone Alarm as
well as the Windows firewall. Is it unnecessary or, in other words, should I
completely trust the Windows firewall?
:O)
Cheers
Gilbert
 
What are the known issues about using two firewalls? I have Zone Alarm as
well as the Windows firewall. Is it unnecessary or, in other words, should I
completely trust the Windows firewall?

Two firewalls is redundant and I have seen problems with having two
running, although not often. If you want to completely trust one, get the
latest version of ZoneAlarm as it is just as effective as the Windows
firewall at blocking unwanted incoming traffic plus has additional features
not available in the Windows firewall.
--
Tom Porterfield
MS-MVP Windows
http://support.telop.org

Please post all follow-ups to the newsgroup only.
 
Use just ZoneAlarm.

[[Q. Should I use both Internet Connection Firewall and a software firewall
from a different company on my Windows XP computer?
A. No. Running multiple software firewalls is unnecessary for typical home
computers, home networking, and small business networking scenarios.
Using two firewalls on the same connection could cause issues with
connectivity to the Internet or other unexpected behavior. One firewall,
whether it is the Windows XP Internet Connection Firewall or different
software firewall, can provide substantial protection for your computer.]]

Frequently Asked Questions About Internet Firewalls
http://www.microsoft.com/security/protect/firewall.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Tom Porterfield said:
Two firewalls is redundant and I have seen problems with having two
running, although not often. If you want to completely trust one, get the
latest version of ZoneAlarm as it is just as effective as the Windows
firewall at blocking unwanted incoming traffic plus has additional
features
not available in the Windows firewall.

Thanks for that.
I'll go with ZA since the Windows Firewall didn't pass the leak test -
see http://www.grc.com/lt/leaktest.htm
Cheers
Gilbert
 
What are the known issues about using two firewalls? I have
Zone Alarm as well as the Windows firewall. Is it unnecessary
or, in other words, should I completely trust the Windows
firewall?


No, you should use ZoneAlarm, and *not* the WIndows firewall.

By running twofirewalls, you achieve no extra protection, you
incur the extra overhead of running two firewalls, and you run
the risk (probably small, but not zero) of conflicts between
them.

See
http://www.microsoft.com/athome/security/protect/firewall.mspx

which includes the following:

"Q. Should I use both the built-in firewall and a software
firewall from a different company on my Windows XP computer?



"A. No. Running multiple software firewalls is unnecessary for
typical home computers, home networking, and small-business
networking scenarios. Using two firewalls on the same connection
could cause issues with connectivity to the Internet or other
unexpected behavior. One firewall, whether it is the Windows XP
Internet Connection Firewall or a different software firewall,
can provide substantial protection for your computer."



Also note that if you update your third-party firewall to a new
version, the update routine will probably turn it off first. If
the Windows firewall isn't running, you will temporarily be left
with no running firewall, which is very dangerous. So turn on the
Windows firewall temporarily before doing maintenance on your
third-party firewall.



The Windows firewall monitors incoming traffic only. Almost any
third-party firewall will also monitor outbound traffic, stopping
rogue programs trying to call home, and is a better choice.
 
Ken Blake said:
No, you should use ZoneAlarm, and *not* the WIndows firewall.
The Windows firewall monitors incoming traffic only. Almost any
third-party firewall will also monitor outbound traffic, stopping rogue
programs trying to call home, and is a better choice.
Thanks Ken, I'd come to the same conclusion,
having used Steve Gibson's cunning little LeakTest
http://www.grc.com/lt/leaktest.htm
on both ZA and Windows. ZA is more secure.

Cheers
Gilbert
 
If you use a Router/Firewall (for cable, DSL and dialup) you
will be quite secure with the Windows XP SP2 Firewall.


There is no such thing as perfection when it comes to security.
You can be relatively secure, but never "quite" secure.

Moreover, using a router adds practically nothing over what the
built-in Windows firewall provides. You are still monitoring
incoming traffic only, and I think it's therefore wise to use a
third-party firewall.
 
Back
Top