Sygate Personal Firewall alternative?

Hi, Personally I use Comodo Firewall but configuring it isn't easy!

Alongside whatever firewall you actually use you can try Threatfire. If you crank up the settings to what I call "Paranoid Mode" then it will alert you on pretty much any connection attempt and prompt you to allow, deny and optionally remember your choice.

Adjust the slider as shown:



See the protection log and click the info symbol for detailed information:



Threatfire direct download link:

http://www.threatfire.com/files/tfinstall.exe

mt12345 said:

Panda is a cloud service, no need to 'update virus database', whenever you connect to internet the database is up to date on the server. With Avast (and others) you connect to internet and start browsing with outdated database. Thus I would recommend Panda for people who connect to internet not often (like me). I would say no matter what antivirus you use, it works the best if you are constantly online. What do you mean by avast for laptops?

Yes I know panda is cloud based. I stated avast is best for laptops as it uses definitions. Laptops can not always be connected to the net all the time. Avast uses definitions combined with streaming cloud updates.

mt12345 said:

Ayy! I clicked 'Malwarebytes' in your signature - it is linked to the exe file directly! Please change it.

Sorry there is a reason it is like that, I am not changing it.

Link Is visable by hovering over it. The reason I do it that way is to many users click the wrong download button. This ensures they are downloading the right thing, and the site still gets visited.

Callender said:

Alongside whatever firewall you actually use you can try Threatfire. If you crank up the settings to what I call "Paranoid Mode" then it will alert you on pretty much any connection attempt and prompt you to allow, deny and optionally remember your choice.

but the options are: allow (to continue suspicious action, not necessarily internet access), kill process, kill+quarantine.

I only want to block internet access for given application not to kill it!

or I missed something?

Please accept my apologies. I'm so used to blocking unwanted connections that I rarely see a Threatfire alert and has actually forgotten that those options that you noticed are the correct ones. The idea is that you get notified about connections and either allow them or if an app is connecting when it doesn't need to like when it's just sending usage statistics you block it using your firewall rules and not Theatfire.

Here's an example:

AutoRunFileRemover wants to connect. It's a safe process but is not updating and is just sending usage statistics.

I kill the process (but only this time).



I block future connections using Firewall Rules and it won't connect again.





If I see unwanted process or something dodgy then it's killed and quarantined.

Threatfire can bug the hell out of you for a few days with alerts but once it gets to learn your choices it settles down.

Actually I REPLACED Tinywall with Comodo and after setting to 'custom' and tweaking application rules I am quite satisfied.
So when AutoRunFileRemover is trying to connect (for first time), you get 2 pop-ups (threatfire and comodo)?

mt12345 said:

Actually I REPLACED Tinywall with Comodo and after setting to 'custom' and tweaking application rules I am quite satisfied.
So when AutoRunFileRemover is trying to connect (for first time), you get 2 pop-ups (tinywall and comodo)?

Actually I switched off HIPS in Comodo and rely on Threatfire so I only see one pop up from Threatfire. I prefer it to Comodo's HIPS protection and i like the logging ability and have been using it for ages now. If you find that you prefer to rely on Comodo for connection alerts I don't really see a problem with that!

Also you might want to look at this but just read the Firewall information!

How to Install Comodo Firewall

but threatfire will not detect more 'threats' than comodo (hips)?

thanks for link I was looking for some tutorial