XP SP2 and firewall

[peter]

SP2 has an updated fire wall built in, if one is using Symantec's firewall,
would there be a conflict with the two firewall?
Symantec internet security fire wall is running at the moment do I need to
disable before installing sp2? or disable sp2 firewall after the
installation?

Thanks

 

[root]

SP2 has an updated fire wall built in, if one is using Symantec's firewall,
would there be a conflict with the two firewall?
Symantec internet security fire wall is running at the moment do I need to
disable before installing sp2? or disable sp2 firewall after the
installation?

Uninstall the Symantec firewall and use SP2's firewall.

 

[peter]

Not sure I would want to do that at the moment. But thanks any way. Any
other suggestions from others?

Peter

 

[Malke]

SP2 has an updated fire wall built in, if one is using Symantec's
firewall, would there be a conflict with the two firewall?
Symantec internet security fire wall is running at the moment do I
need to disable before installing sp2? or disable sp2 firewall after
the installation?

Thanks

Yes, disable Symantec's firewall before the install, along with the
antivirus. Then after the SP2 install, disable Windows firewall and use
the Symantec one. You can adjust the Security Center Alert settings in
the new Security Center Control Panel applet.

Malke

 

[CS]

SP2 has an updated fire wall built in, if one is using Symantec's firewall,
would there be a conflict with the two firewall?
Symantec internet security fire wall is running at the moment do I need to
disable before installing sp2? or disable sp2 firewall after the
installation?

Thanks

Peter:

Leave it on. The new Security Control Panel in SP2 will detect the
Symantec Firewall and NOT turn on the XP SP2 firewall. I left Zone
Alarm Pro on during the install to my desktop and SP2 detected it OK
and did not turn on the XP firewall. I also left Zone Alarm (the
free version) running on my Toshiba notebook when I installed SP2 and
it did the same thing.

Regards.

 

[peter]

Thanks for the suggestion.

Peter

Peter:

Leave it on. The new Security Control Panel in SP2 will detect the
Symantec Firewall and NOT turn on the XP SP2 firewall. I left Zone
Alarm Pro on during the install to my desktop and SP2 detected it OK
and did not turn on the XP firewall. I also left Zone Alarm (the
free version) running on my Toshiba notebook when I installed SP2 and
it did the same thing.

Regards.

 

[Bruce Chambers]

Greetings --

The "next generation" Windows Firewall included with SP2, while
vastly superior to the original ICF in terms of visibility, usability
and configurability, is still rather lacking, as a solid security
component. It still can't supplant 3rd-party solutions, nor is it
intended to do so; rather, it's intended to complement them. And, like
the original ICF, it will not monitor out-going traffic.

It's most important virtues, I think, are it's improved
compatibility with internal LANs and its configurability via group
policies. Now, there's a simple, cheap tool that system admins can
use to protect the LAN workstations from that occasional - but not
rare enough - fool who manages to bypass the perimeter firewall and
manually install some malware that could then spread throughout the
LAN via shared drives.

WinXP's built-in firewall is _adequate_ at stopping incoming
attacks, and hiding your ports from probes. What WinXP also
does not do, is protect you from any Trojans or spyware that you (or
someone else using your computer) might download and install
inadvertently. It doesn't monitor out-going traffic at all, other
than to check for IP-spoofing, much less block (or at even ask you
about) the bad or the questionable out-going signals. It assumes that
any application you have on your hard drive is there because you want
it there, and therefore has your "permission" to access the Internet.
Further, because the ICF is a "stateful" firewall, it will also assume
that any incoming traffic that's a direct response to a Trojan's or
spyware's out-going signal is also authorized.

ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even the commercially
available Symantec's Norton Personal Firewall is superior by far,
although it does take a heavier toll of system performance then do
ZoneAlarm or Sygate.

SP2's Windows Firewall is intended to complement
3rd-party firewalls, so it won't hurt anything to leave it enabled
whilst using another software firewall, but it also won't do much
good, except as extra "insurance."


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Bruce Chambers]

Greetings --

Why are you deliberately posting bad advice?

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Bruce Chambers]

Greetings --

It might be a good idea to preface that advice with a warning to
completely disconnect the PC from the Internet before starting the
installation.

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[XS11E]

.

Uninstall the Symantec firewall and use SP2's firewall.

Bad advice!

The Symantic firewall isn't one I'd recommend but it has advantages
over the XP firewall in that it can control traffic both ways while the
XP firewall only controls inbound traffic (there was a rumor that SP2
would fix this but it didn't happen). So, I'd use the Symantic
firewall and turn off the XP firewall. You can run them both but why?

 

[peter]

Thanks Bruce for the explanation.
Sometimes you get advise from others, but I think it's up to the individual
to determined if it's good or not (like the one about uninstalling Symantec
firewall) didn't sound right to me.
But from the many response I am a little more educated now than before.

Peter

 

[xfile]

Hi:


I am using NIS 2004 and XP Pro.

What I did for upgrading to SP2 is the following: (1) I downloaded the full
version of SP2 from MS TechNet site, (2) I updated all NIS 2004 files
"before" run SP2 file.

The update process was smooth (I guess I was lucky) and when I rebooted the
system, it asked me if I want to use NIS to manage the security (firewall)
and I selected "yes" and which also disabled Windows firewall. I guess that
option is from the NIS for working with the new SP2.

After that, I make sure all windows firewall option (in Control Panel) is
set to "off" while I continue to let NIS 2004 to do the firewall and
anti-virus protections.

In my case, I did not un-install NIS and according to Symantec's site, it
seems no need to do so.

One final reminder, SP2 also provides pop-up blocker and NIS and other
utilities also provide similar functions. Although I did not experience
conflicts between any of those, but I did find out that if I need to allow
pop-up windows, I need to set all pop-up blocker to allow for the site, and
in this case, that means Windows pop-up blocker, NIS's pop-up blocker, and
MSN tool bar's pop-up blocker. If any of those has not set to allow for a
particular site, it will not allow pop-up windows to come up.

Just to share with u.

 

[Bruce Chambers]

Greetings --

You're welcome.

Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH