Tuesday, April 22, 2008

About firewalls*

Regular readers of this post know that I advise running a firewall. It has been a while since I have told you how to do that, so I will do so today. If you already have a firewall, you may want to keep reading as some firewalls are not as good as others (and some are next to worthless) and I will get into the details on that further down the page.

A firewall is a tool that essentially seperates networks, and allows/blocks "traffic" between those networks. Basically its goal is to block "bad" traffic from entering your machine or home network from the vast, scary Internet, and only allow "good" traffic to come and go.

Tip of the day: Install and enable a 3rd Party firewall. Or, if you have one already, turn it on. Microsoft brought personal firewalls into Windows with XP Service Pack 2 (and improved it in Vista), so if you are running XP or newer you already have a firewall built in and so the first thing to do is to make sure it's turned on. There are several ways to check the status of Windows Firewall, and here's a couple: Start >Connect to >Show all network connections, or Start >Control Panel >Network Connections.
You will now see a window showing your networks. You want to look under the heading "LAN or High Speed Internet" for the network that says "Connected", (mine says "Wireless Network Connection" because I'm writing this from my laptop and I'm in my local public library) and if it's on, "Connected, firewalled". Right-click on the icon and select Properties and select the Advanced tab. The top area is your firewall. Click the Settings button, use the radio button to turn it on. Done.

Your computer may have come with, or you may have purchased, an Internet Security Suite -- typically from a vendor like McAfee -- and these all come with some sort of firewall. You should know if it is enabled because if it is, you will have been pestered with pop-up warning boxes asking for an "Allow or Deny?" decision [the price you pay with all firewalls, as they "learn" your configuration and usage].
To make sure it's "on" open the suite's control panel by double-clicking on its desktop icon or right-click its system tray icon. There will be several categories of "protection", and each interface is different, so you may have to explore a little bit to find it.

PLEASE NOTE: It is "not good" to have two firewalls running at the same time! Use only the strongest firewall you have available.

Okay, so what do I mean by "strongest"? Well first of all, you may have read that the Windows Firewall isn't very good. This is particularly true of the XP firewall, and that criticism is mainly because it's a "one-way" firewall -- it is only designed to prevent intrusions. It is incapable of monitoring the traffic that leaves your PC. It cannot prevent your personal data from "leaking" out. It is also not very "robust". (Vista's firewall is 2-way.)
Robust, in computing, is a term used to describe how, steady and reliable a system is, how “fault tolerant”, and how difficult it is to purposely “crash” it. A lot of the personal firewalls available simply aren’t very robust, and a hacker can bring them down fairly easily, and then, obviously, you would be unprotected.

ALSO NOTE, Please: It is my belief that any firewall is better than no firewall. It will protect you from the casual or inexperienced hacker. However, keep reading because there are robust, two-way firewalls available for free.

If you want a professional-strength firewall (and my point is, you do), the top contenders are for-sale versions, and they are not unreasonably priced. Kerio (now owned by Sunbelt), Outpost Pro, and ZoneAlarm Pro are my recommended choices.

Free link(s) of the day: There are two free firewalls that are as good as the for-a-fee ones mentioned above. My first reco’ is the free version of ZoneAlarm. The Install starts out as the “Pro” version and then reverts to a free version. The Pro version period really helps with firewall’s “learning” and seems to me easier for the average user to configure and use. It is quite vigilant and “chatty” — but it’s effective.
A more robust firewall is offered by Comodo. It takes more system resources and seems to me quite slow in responding to allow/deny answers and isn’t quite as “user friendly, but it is quite configurable for the more advanced user.

*Prior publication 6/30/07

Copyright 2007-8 © Tech Paul. All rights reserved.jaanix post to jaanix

Share this post :

No comments: