Do I really need a firewall?

neil1973 · 18 Apr 2016 at 22:47

I’m looking to install some anti-virus software. There’s Windows Defender that’s running on windows 8.1 I have installed, there’s the free ones and then there’s the likes of Bitdefender and Kaspersky. Even something like Kaspersky has different products. I noticed that the cheapest one on Bitdefender and Kaspersky, the basic antivirus, has no firewall. So I googled whether I needed a firewall and found articles saying “are you crazy your done without a firewall!” and others saying that it doesn’t really do much anymore and my router has one anyway.
I’m pretty clueless when it comes to PC’s and especially the internet and I hate the idea of people using that to take money off me through scares and paranoia, so I thought I’d come here and see if anyone had any advice on how real the risks are and what are the things I really can’t do without. Free or paid? And what happens to those fooling enough to live without a firewall?

flowrider99 · 18 Apr 2016 at 22:51

I havent used a PC based firewall for years, all routers have one built in anyway. I only use Windows Defender and Malwarebytes.

Raumarik · 18 Apr 2016 at 22:59

Windows 8.1 has a firewall built in. I'm fairly sure all versions of windows from XP have had them.

adolf hamster · 18 Apr 2016 at 23:08

Comodo do a free firewall, and given how hard it is to use a minecraft server with it i'd say its effective enough.

As others have said routers have hardware firewalls, as long as you dont open that up it should be fine.

The first and last steps to data security are always a good backup system, some script kiddy bricks your pc you can just nuke from orbit and reinstall everything, that and a little common sense in terms of not storing passwords on your desktop in a text file etc and you'll be fine

neil1973 · 19 Apr 2016 at 03:34

I’m pretty anal with passwords, and I keep a system backed up now. Thanks for the advice guys. So apart from the firewall and sensible behaviour, are you using free antivirus, one of the big names or just the windows defender?

Edward78 · 19 Apr 2016 at 05:23

There is Zone alarm also, is Comodo better?

edscdk · 19 Apr 2016 at 07:19

Edward78 said:
There is Zone alarm also, is Comodo better?

id go with no firewall, who on your LAN is going to try and hack your PC?

opethdisciple · 19 Apr 2016 at 11:31

Just use the standard windows firewall. It's all you need.

Scurburg · 19 Apr 2016 at 12:04

You dont really need a firewall for incoming connections anymore as your router and windows firewall covers this. You only need a software firewall for outgoing connections really, which is not really necessary unless you want to block some software from accessing the net/network and want more control over what happens.

Comodo is probably the best free one for this purpose atm, and it is something I use, but you may want to disable some of the other features it comes with if you are using another AV program, and use the custom install to deselect anything but the firewall. Its also not as user friendly as it once was.

Grrrrr · 19 Apr 2016 at 15:00

edscdk said:
id go with no firewall, who on your LAN is going to try and hack your PC?

Any compromised network device: your phone, a friend's phone, tablet, printer or any of the countless poorly secured IoT devices that are available now.

Deleted member 77746 · 19 Apr 2016 at 15:22

Don't bother installing more software. You have (I hope) a hardware firewall (Router) and software firewall built into Windows XP onwards.

neil1973 · 19 Apr 2016 at 16:03

I have the standard router that came from Talktalk with my broadband package. I tried to call Talktalk to see if this operated as a firewall for incoming connections but he seemed confused and kept trying to sell my there security package. Am I right in understanding that all routers work like a firewall?

KIA · 19 Apr 2016 at 17:12

neil1973 said:
Am I right in understanding that all routers work like a firewall?

Yes. Network Address Translation acts as a firewall.

You do not need a 3rd-party software firewall. Keep Windows Firewall enabled. Use Windows Firewall Control if you'd like outbound filtering control.

In its default state, a router protects the entire LAN from malicious traffic trying to get through from the Internet.

A software firewall protects a device on the LAN from malicious devices on the same LAN.

Nevakonaza · 19 Apr 2016 at 20:51

Dont get why you wouldn't just have a firewall enabled anyway,It doesn't really use any resources it been enabled.

I have Eest Smart security (Which has its own firewall),Windows firewall enabled and my Asus Router also has a built in firewall and anti-DDos protection..no issues here.

Blackjack Davy · 20 Apr 2016 at 14:03

Routers have a built in firewall that will stop incoming, if you want control of outgoing connections then Comodo is probably the best. You'd be amazed at the amount to stuff that want to phone home for no apparent reason and without asking for permission. I have blocked more than one trojan or keylogger trying to dial home so paranoia or self defence? Your call.

m4cc45 · 20 Apr 2016 at 21:02

edscdk said:
id go with no firewall, who on your LAN is going to try and hack your PC?

It's not just your LAN it's your WAN as well. Incorrectly configuring or a bug or old software can make your PC wide open.

Everything newer than Windows XP SP2 has an inbuilt software firewall. If you recall there was an exploit which would cause Windows to restart which is why Microsoft added the firewall.

I certainly wouldn't be without one but the Windows inbuilt firewall is what I use. I just delete all of the rules and then turn on the notifications so that I have to allow any inbound or outbound traffic.

M.

neil1973 · 21 Apr 2016 at 01:32

It wasn’t that I was thinking of having no firewall just that the cheap packages of the big name Antivirus software often don’t include a firewall and I was curious what folk meant about the router. The windows firewall will be on and I'll follow m4cc45's method and change the rules I think. Still not sure about the rest, whether Defender will do, or a free program or something like Bitdefender. The basic packages are only about £20 for the year I guess but if it’s not really needed I can find something else to spend £20 on. I know it’s a bit of a vague question, that’s why I’m curious what other people here use?

KIA · 21 Apr 2016 at 18:34

neil1973 said:
Still not sure about the rest, whether Defender will do, or a free program or something like Bitdefender. The basic packages are only about £20 for the year I guess but if it’s not really needed I can find something else to spend £20 on. I know it’s a bit of a vague question, that’s why I’m curious what other people here use?

A free solution such as Windows Defender, Bitdefender, or Sophos Cloud will do. You'd be spending your money on a false sense of security, nothing more.

m4cc45 · 21 Apr 2016 at 19:42

KIA said:
A free solution such as Windows Defender, Bitdefender, or Sophos Cloud will do. You'd be spending your money on a false sense of security, nothing more.

I'd agree but you need to couple that with common sense. Have a user account rather than an administrator account and use that. Don't click dodgy links or 'click-bait'. Use ad-blocks where possible. If you want to go the extra mile you can use Open DNS and lock that down to what you want to see.

M.

neil1973 · 21 Apr 2016 at 21:34

That's good to know, there's so many of these antivirus programs. I do try and be careful, though my browsing tends to be very utilitarian. I shall create a user account on my PC too.