Are firewalls really needed?

[deepakumar]

deepakumar- Congratulations on your new state of the art multi-layered default deny computer security software! Make sure to do a full scan to make sure that your computer is clean before setting up HIPS.

Comodo makes using HIPS easy if you first in the GUI go into Defense+> Advanced> Defense+ Settings and set it to Training Mode and then one by one start all of the programs that you use and HIPS will learn all of your trusted programs. When you are finished return Defense+ to Safe Mode and it will notify you of any unauthorized code executions on the desktop.

If you set the Comodo Firewall in Custom Policy Mode in the GUI Firewall> Advanced> Firewall Behavior Settings it will alert you each time a program requests to access the internet and you can then choose to allow or block the request which will establish your Firewall Rules.

If you have any more questions please feel free to ask.

~Maxx~
.

Thank buddy ...surely will follow the steps & will set-up my firewall & then will check if now port#135 & 445 are closed because that was my concern.
Yeah i'm a question bank & a curious guy:
here is the ques: if i choose not to install Comodo Antivirus (since already have 1) how can i install it "now" (since now i got Firewall in place) do i've to reinstall completely or is there a shorter way do it???

 

[Maxxwire]

Yes, if you want to install the Comodo AV you will need to uninstall Comodo 2011 and then reinstall it with the AV option selected for install. If you decide to take this option make sure to export your Firewall and D+ definitions so that you can import them again from Misc.> Manage My Configurations in the GUI after the fresh install.

Speaking of ports Comodo allows you to stealth all of your computer's ports which can be done in the GUI from Firewall> Stealth Ports Wizard.

~Maxx~
.

 

[Layback Bear]

I have some positive things to say. I have read through all these post 2 or 3 time in the last couple of days and now I'm sure a software firewall can't hurt you but it sure can help you. The less knowledge one has setting up a firewall the less help they get. IMHO there is no such thing as to much security. I would recommend to all to have that extra layer of security by using a software firewall. Heck there are still people running around on the internet preaching that anti virus are a waste of time and or money. WinPatrol is another little goodie I use to help me know what is going on when I'm not watching. At this time I have a anti virus, W7 firewall, and WinPatrol active and seven other on demand programs that deal with cleaning junk up and scanning for something my security programs that are running might of missed. For those that want more or less security than people like me use, that's okay because it's your computer. Thanks Maxx for reminding me to check my firewall setting again. It's been awhile and I have added some new programs since that set up.

 

[CarlTR6]

I've spoken with people who were using ZA about 7-8 years ago and according to them it was THE computer security software to have back in 2002.

~Maxx~
.

You are right. ZA ushered the era of software firewalls. I still run ZA on my XP computer. Keep in mind that my computers are behind a commercial router firewall. I really do not need a software firewall.

 

[deepakumar]

Yeah you are right CarlTR6 that people sitting behind router firewall are safe but basic purpose of software firewall is only for people who don't use/have a router+others as well.....but router firewall is much safer then a normal software firewall....

 

[Creer]

It depends on what kind of level of your layered security protection you want to achieve.
Even with hardware firewall - software firewall can be a keeper. Software firewall gives you full ability to control outbound connections, when hardware firewall don't ask you that the malware file ex.trojan.exe is trying to connect from your computer to the Internet (please note that trojan.exe from this example is at this moment is a 0-threat malware so no one based-on detection level applications like AV/AS or AM is able to detect it).
Without layered security approach you are *BOOM* infected in this case.

 

[CarlTR6]

You are already infected if a trojan is trying to connect to the internet. But I do agree; the software firewall will alert you - if properly configured - and you can take action.

 

[Maxxwire]

One of the benefits of using a software firewall in addition to the hardware firewall I have is that it will tell me who the programs on my computer are trying to talk to on the internet whether they are 3rd party programs or part of the OS so that I can decide whether or not to allow the communication.

~Maxx~
.

 

[Layback Bear]

As far as I know using a router and a software firewall don't argue with each other or slow down anything. So why not use both.

 

[Maxxwire]

In a word...Exactly!

~Maxx~
.

 

[WindowsStar]

software firewalls are designed to protect "you" from "yourself". With a nat hardware firewall, you only protect the bad guys from coming in. However, they don't do jack to stop you from going to a malicious website and clicking on something and accepting the payload. This is where the software firewalls come into play.

a big +1

 

[CarlTR6]

software firewalls are designed to protect "you" from "yourself". With a nat hardware firewall, you only protect the bad guys from coming in. However, they don't do jack to stop you from going to a malicious website and clicking on something and accepting the payload. This is where the software firewalls come into play.

a big +1

I also agree. But by the time the software firewall picks up the outgoing, you already have the nasty on your system.

 

[WindowsStar]

software firewalls are designed to protect "you" from "yourself". With a nat hardware firewall, you only protect the bad guys from coming in. However, they don't do jack to stop you from going to a malicious website and clicking on something and accepting the payload. This is where the software firewalls come into play.

a big +1

I also agree. But by the time the software firewall picks up the outgoing, you already have the nasty on your system.

You are right; and that is why one must have a great AV and anti-malware software as well.

 

[Maxxwire]

I am of the opinion that all Malware including the 0 Day variety that AV programs do not yet have a definition for on their Black List should be prevented from accessing the computer in the first place before they can infect and propagate. Running my browser in the virtual space of Sandboxie has successfully prevented the detection of any Malware on both of my computers for almost 2 years now.

Internet Security software will alert you of potentially damaging applications before they are installed, but Sandboxie will prevent them from harming your computer long before that by preemptively isolating them in its virtual space on the HDD where they can be easily destroyed before having a chance to make any alterations to the registry or system files. It is also safer to restore your computer from a clean restore point, Win 7 system image or 3rd party backup Image than having an AV program clean up a Malware Infection should one occur.

~Maxx~
.

 

[hello people]

In Windows 7...are the default Windows Firewall settings set so that your PC is invisible?

I seem to recall a couple of years ago setting my XP Home firewall to invisible on the back of some advice I got from someone somewhere.

 

[hello people]

Yeah, Windows 7 firewall is 2-way.
But what is the point if by default settings anything, I mean anything is allow to outbound communicate.
This default rules will not be changed by users I mentioned (which are majority).
They will be changed by only handful people. Something like 0.5% of Windows users?
well done, Thats an achievement.

So, in default settings it's outbound protection doesn't count...

I suppose this is where a guy like me comes in....smart enough to follow the discussion...hell...to find the discussion!

....but in need of some advice for how to make the default Windows 7 firewall more robust.

I'd be happy to provide any screenshots/ details if anyone can help me.

If there is an existing thread...please direct me to it.

thanks

 

[Maxxwire]

hello people- Welcome to the Windows 7 Forums! I learned from making the same kind of mistake that when making quotations you need to make sure that the right name is attached to the quote. The quote in your post above is from actually from jav and not myself.

As far as Firewalls go I've been using the top rated granularly programmable fully stealthed Comodo Firewall to keep both my 3rd party and Windows programs from going to the internet without my prior approval for almost 2 years now. I'm totally amazed at how chatty many Windows programs are in that every time they are accessed they keep trying unsuccessfully to call Redmond and tell them all about it, but their internet access is denied!

~Maxx~
.

 

[hello people]

I used to use Comodo a couple of years ago in XP.

Do you have any idea if there is a link between in/out communications let through by a sloppy/ default firewall configuration, and hard drive activity?

And...yeah I'll try to be more accurate in the quotations.

Thanks for the welcome...looks like a great database of support and a helpful community

 

[jav]

In Windows 7...are the default Windows Firewall settings set so that your PC is invisible?

I seem to recall a couple of years ago setting my XP Home firewall to invisible on the back of some advice I got from someone somewhere.

Press Start
write "network and sharing center"
click enter
click "change advanced sharing settings" in the left bar
Turn off "network discovery" and other sharing settings if you do not share anything with other computers in your network. (both in home and Public profiles)

....but in need of some advice for how to make the default Windows 7 firewall more robust.

It depends on, how far are you willing to go.
So, how much security do you desire?
Are you ok with inbound only control?
Do you want to block all inbound connections or do you need some exceptions?
Or do you need full-blown outbound control?

So, you have to choose your own balance of convenience and security. And we will support you on achieving it

 

[Maxxwire]

I used to use Comodo a couple of years ago in XP.

Do you have any idea if there is a link between in/out communications let through by a sloppy/ default firewall configuration, and hard drive activity?

The good news is that has seriously bumped up its game over the last 2 years and Comodo still has the top rated Firewall and Defense+ HIPS protection according to the Matousec Proactive Security Challenge and in Comodo 2011 in addition to the Sandboxing of all unrecognized applications they have added...

-Extended spyware scanner and improved malware cleaning
-Cloud Based Antivirus Scanning
-Cloud Based Behavior Analysis
-Cloud Based Application White-listing
-Game Mode

Over the almost 2 years that I've used Comodo the developers have streamlined its performance and made it much quieter with fewer pop-ups while still maintaining the 100% Malware-free status of both of my computers.

~Maxx~
.