Do I need a software firewall?

Aidoscuz · 19 Nov 2006 at 20:58

Hey all

I've been using Kerio Personal Firewall for the last while but after looking at some posts in this forum I've seen lots of people say that there's no need for a software firewall if you're behind a router. I've got a Netgear DG834G, so would the firewall on this be good enough to use on its own? Or would the router firewall backed up by the SP2 windows firewall be the best option?

Thanks

Craig321 · 19 Nov 2006 at 20:58

Yea, have the Windows firewall enabled as well as the router one.

modo77 · 19 Nov 2006 at 22:34

As said yes, but pretty much only so you have control over what apps are using the inet. The router will take care of the rest.

metalmackey · 19 Nov 2006 at 23:48

Why do people say that the SP2 firewall and a NAT router is good enough when neither monitor outgoing connections?

Mekrel · 20 Nov 2006 at 00:05

because outbound monitoring is useless, a firewall is used to hide ports - something that outbound monitoring is not a part of.

metalmackey · 20 Nov 2006 at 00:17

In that case, why do firewalls like zonealarm have outbound monitoring?

Clarkey · 20 Nov 2006 at 00:19

to make you think its doing something useful, when in actual fact its just bugging the hell out of you.

In actual fast, SPI firewalls do have outgoing port management too.

Felix E · 20 Nov 2006 at 00:24

I have a DG834G too, I haven't run a software filewall since getting it and I've never had any problems with viruses, spyware or any other nasties. I use programs like ad-aware sometimes but they never pick up anything major. Maybe I've just been lucky, but it's been over a year and a half since I got the router.

PinkPig · 20 Nov 2006 at 01:09

metalmackey said:
In that case, why do firewalls like zonealarm have outbound monitoring?

They warn you of any (not already allowed) connection to the internet made by a program from your computer. If you only install applications you trust and use anti-virus software, then it's probably fair to say it's not particularly crucial. Plus, lots of legitimate programs have such weirdly named files and processes that you end up with most users just clicking "yes" whenever they see a message from their firewall, so I would say that outgoing firewalls have very limited uses.

Rich43 · 20 Nov 2006 at 02:54

I'm fine without a firewall.. some virus checking is good though... So you catch the viruses but you don't get bugged by a firewall

PinkPig · 20 Nov 2006 at 08:28

Rich43 said:
I'm fine without a firewall.. some virus checking is good though... So you catch the viruses but you don't get bugged by a firewall

I hope you still have an inbound firewall installed - otherwise you're pretty exposed to any new vulnerability that turns up.

Aidoscuz · 20 Nov 2006 at 21:53

Thanks for the replies. I've uninstalled Kerio and stuck on the windows firewall, which has saved a nice bit of memory. Haven't been hacked so far

ic1male · 20 Nov 2006 at 22:28

Yeah, I used to be a big fan of Agnitum Outpost Firewall but since moving to XP x64 and they not having a compatible version (until recently) I never bothered renewing my licence.

Now I think Vista has control for outgoing applications. There is a whole new MMC for Firewall with Advanced Security. Haven't tinkered about with it yet.