Network security.

[Robert]

I currently run a Draytek Vigor 2910G

It has a hardware firewall - is it enough? Should I be running a software firewall as well?

I have kaspersky on and wireless is locked down to WPA etc (for local connections).

 

[mdjmcnally]

That should be more then enough with kasperskyAV on your PC.

 

[quackers]

I perfer to have a software firewall running, to see what's trying to get out from my system

 

[mynsa]

you have inbound connections properly secured by the sounds of it, if you have configured firewall correctly.

However, there is always the issue - (example) what if you download a virus who decides to start chucking out spam from your workstation, the connection is natted straight out, so it has direct access to the internet, so will spew out spam all day.

but to be honest i personally dont like software firewalls and all the pop ups etc they bring, but it all depends on your paranoia level and the data your protecting, i personally run a hardware firewall for incoming connections and surf the web with a bit of care, but im not protecting any sensitive data.

edit -- you could lock down all outbound access and run a proxy server (giving proxy server the outbound access on ports 80 and 443) and let the proxy server do all your web fetching, but again, its a bit overkill for a home setup (if this is a home setup).