Windows Firewall and 3rd Party Firewall

[JamesJ]

Windows Vista Basic sp1.

Im using a 3rd party firewall program. In Administrative Tools---Services
it shows Windows Firewall status as Started. But, in Security Center it
shows my 3rd party firewall being On but Windows Firewall being off.
Also, in Administrative Tools---Windows Firewall with Advanced Security is
showing
Windows Firewall being on in Domain Profile. Is this normal?
Why would one show Windows Firewall as On and another show it as Off???

James

 

[Victek]

Windows Vista Basic sp1.

Im using a 3rd party firewall program. In Administrative Tools---Services
it shows Windows Firewall status as Started. But, in Security Center it
shows my 3rd party firewall being On but Windows Firewall being off.
Also, in Administrative Tools---Windows Firewall with Advanced Security is
showing
Windows Firewall being on in Domain Profile. Is this normal?
Why would one show Windows Firewall as On and another show it as Off???

James

Interesting. I have Vista Business SP1 and see the same thing. Apparently
running the service is not the same an enabling the firewall. I guess you
could turn off the service, however if you uninstall the 3rd party firewall
you would have to remember to turn the service back on. 3rd party firewalls
are usually smart enough to toggle the Windows firewall off when they
install, and back on if they are uninstalled, but obviously the service
needs to keep running for that to not require user interaction.

 

[JamesJ]

I keep hearing about it's not a good idea to have 2 Firewall programs
running, that they
could conflict.

 

[Jesper Ravn]

I keep hearing about it's not a good idea to have 2 Firewall programs
running, that they
could conflict.

Yes that's correct.
Uninstall the 3rd party firewall and enable/use Vista's built-in. Thats
really all you need.

/Jesper

 

[JamesJ]

My 3rd party firewall is part of a internet security suite and I plan on
keeping
it up and running unless I run into some unforeseen problems, it stays.

James

 

[Jesper Ravn]

My 3rd party firewall is part of a internet security suite and I plan on
keeping
it up and running unless I run into some unforeseen problems, it stays.

Ok, but then uninstall your security suite, you really dont need it.
To setup a simple and clean defense layer, follow these steps:

1. Enable automatic updates (Windows + Adobe + Java, etc.)
http://www.mechbgon.com/build/security2.html#update

2. Enable windows firewall
http://www.mechbgon.com/build/security2.html#firewall

3. Usa a limited user account (LUA)
http://www.mechbgon.com/build/security2.html#non-admin

4. Setup Software Restriction policy
http://www.mechbgon.com/srp/

5. Make one baseline image (system backup)
http://www.macrium.com/ReflectFree.asp

6. Implement data backup (ex. Carbonite online backup)
http://www.carbonite.com

Security suites gives people a lot of problems, dont waste your time and
mony on these products.

/Jesper

 

[JamesJ]

This software also is anti-virus. And as far as I know Windows has none
except for Live Onecare which is a suite that 'gives people a lot of
problems.'

Seems to be working fine for me, for a long time
Must admit though it seems to have slowed my startup somewhat.

James

 

[Jesper Ravn]

This software also is anti-virus. And as far as I know Windows has none
except for Live Onecare which is a suite that 'gives people a lot of
problems.'

Seems to be working fine for me, for a long time
Must admit though it seems to have slowed my startup somewhat.

The point is, that security suites today, is one big ripoff and in the end,
they just slow down your work and waste your time.
If you try to follow the steps I listed before, you dont need Antivirus,
Antispyware, Personal FW or any other security utilitis.

/Jesper

 

[JamesJ]

Shouldn't one scan for viruses occasionally, though??

You've put a bug in my ear now.

James

 

[JamesJ]

Any other opinions? Please feel free to jump in.

 

[Jesper Ravn]

Shouldn't one scan for viruses occasionally, though??

You've put a bug in my ear now.

No, because you wont get infected if you follow the steps I provied before.
Its that simple.

Pros:
No more 1 year paid license (security suites)
No more bugs or constantly updates
No more processes that hangs or goes down
No more installation of scam tools like Superantispyware, Malwarebytes etc.
No more malware on your PC.

Cons:
None

/Jesper

 

[FromTheRafters]

The point is, that security suites today, is one big ripoff and in the
end, they just slow down your work and waste your time.
If you try to follow the steps I listed before, you dont need
Antivirus, Antispyware, Personal FW or any other security utilitis.

You would still need antivirus (and anti-malware would still be a good
idea).

 

[Jesper Ravn]

You would still need antivirus (and anti-malware would still be a good
idea).

Do tell, why we still need it?.

/Jesper

 

[FromTheRafters]

There is no reason (except for human nature) for antivirus to be as
cumbersome as it is in today's environment. Given all of Jesper's
excellent suggestions for securing your system (and strict adherence to
such measures) you would still need antivirus because viruses can get in
through even the trusted methods for running any new programs.

Antivirus is always a part of safe computing best practices.

 

[FromTheRafters]

Antivirus used to be a tool to help a user determine if a program has
been infected with a known virus. It has since become a crutch to enable
users to exhibit unsafe behavior. Seeing the unsafe behavior, and
enacting countermeasures to virtually negate the need for the crutch
does not remove the original need for the detector.

Add to that the fact that viruses can gain ingress by worms, so policies
aren't the last word.

Keep an AV (preferably an "on access" scanner) and the windows firewall.
There is no shame in running the occasional anti[malware|spyware|adware]
applications. A *real* firewall is a good idea too.

 

[FromTheRafters]

Do tell, why we still need it?.

Same as always - to determine if a program is infected with a known
virus before executing it on the system.

 

[Dave]

My 2¢:

Back up your files. I use Acronis True Image Home, plus I have a Windows
Home Server.
Burn you photos and other precious files to DVD, in addition to backing them
up.
Don't use a security suite. They try to do too much, and don't do it very
well.
Use Windows Firewall and Defender.
Use a free Anti-virus, like AVG or Avast, and make sure they are updated.
Don't scan email, it's superfluous and can cause corruption. Anti-spam
software causes more problems than it solves.
Run Ad-Aware and/or Malwarebytes scans weekly, after updating them.
Back up your files.

 

[Jesper Ravn]

There is no reason (except for human nature) for antivirus to be as
cumbersome as it is in today's environment. Given all of Jesper's
excellent suggestions for securing your system (and strict adherence to
such measures) you would still need antivirus because viruses can get in
through even the trusted methods for running any new programs.

Antivirus is always a part of safe computing best practices.

Says who. This is where i strongly disagree with you.
Take any given new trojan and scan it with a online scanner and you will see
the poor results.
People install a security suite and they dont have to think anymore, that is
so wrong and it wont solve the malware problem.
That is false security and it will only gives them a lot of problems. (slow
computer/internet, crashes, you name it).

Malware can only get in, if you choose to logon with an admin account, and
install it. But this is where the word "think" comes in.
Only install applications from trusted sources. If you dont know, search
google.
And if you dont think and malware slips through, you will be up and running
again within 2 hours (from your baseline image and data backup).
How hard can it be .

/Jesper

 

[Jesper Ravn]

Same as always - to determine if a program is infected with a known virus
before executing it on the system.

I asume that you are talking about installing new applications with a admin
account, right.
In the past (+10 years) I have installed a loooots of applications, my AV
newer said anything
Search google instead to see if its a trusted application/source.

/Jesper

 

[JamesJ]

Don't you think that with security suite I now can basically forget about
vulnerabilities and maybe have some fun with my computer???

James