Solved Do you recommend Windows Firewall?

[FerchogtX]

Hi again guys

Recently, I had some issues using ESET Smart Security (Version 4.x), basically its firewall gave me some problems when sharing folders and files between all my PC's (2 with Windows 7, one more using Windows 2000). Since the begining I realized that using 2 firewalls at the same time was not a wise idea... so I wanted to disable Windows Firewall and stay with ESET's one... but networking was not working as spected, beginning with the fact that, if you change the conection type (From restricted to allow file sharing and vice-versa) you need to restart everytime so you can actually see the PC which is sharing files with you... Other issue was that if I disable windows firewall, the network type configurations are not saved... lets say you set public network and you dont wnat to share files there, so you deactivate all file sharing capabilities in there, but in private you allow all sharing options. If you deactivate Windows Firewall, this settings are not saved or reset...

So, being anoyed with this, I decided to enable Windows Firewall for all network connections, and then I disabled ESET one... it was no use for me to keep that one enabled if it was giving so much troubles with W7 (I did this on both W7 PC's I have... my desktop and laptop)... In my XP era I just disabled Windows Firewall, then the whole service and ESET Firewall was working wonders in there... but this is not XP anymore.

So, after this long story, I would ask you if it is recommended by you just using Windows Firewall, Windows 7 has several improvements in security and is not the same as XP, and I can see it by the way it handles networking now... but it's always wise to ask for your advice since you know more than me in this terms

Another question should be, if this suffices my needs, is there a recomended configuration to be safer using Windows Firewall? (I mean, if i don't need to tweak it so it doesn't allow some king of incoming acceses, or outgoing...)

Thanks in advance for your answers and advices

See ya!!!

 

[pparks1]

I have yet to have a need for any third party firewalls with Vista or Windows 7.

 

[gautam7]

I personally don't use windows 7 firewall and does not recomend it either because by default its outbound protection is disabled and IMO its very difficult to configure it properly for outbound connection. Other 3rd party firewall are much easier to use. If you want to use windows firewall then you should use it with firewall control from sphinx. Windows7FirewallControl: Sphinx Software which will give you control. Also get behind a router with hardware firewall which will increase your security.

Hope this helps

 

[pparks1]

I personally don't use windows 7 firewall and does not recomend it either because by default its outbound protection is disabled and IMO its very difficult to configure it properly for outbound connection.

Many of us don't really care about outbound connections. I'm in that camp.

 

[DBone]

The W7 firewall is more than sufficient, especially when paired with a NAT router firewall which does most of the heavy lifting anyway. Most users don't need outbound notification, they just think they do! If you are one of them, then a 3rd party firewall, or one of the 3rd party W7 firewall enhancers are your best bet because W7's firewall is a pain to configure.

 

[gautam7]

I personally don't use windows 7 firewall and does not recomend it either because by default its outbound protection is disabled and IMO its very difficult to configure it properly for outbound connection.

Many of us don't really care about outbound connections. I'm in that camp.

But thats a bit risky because if a firewall does not have outbound protection that means they can't control what information leaves your computer. so if a malware gets through your defences and the firewall don't monitor your outbound connection then its free to communicate your personal data. May i ask why you don't care about outbound connection?

 

[DBone]

While that possibility exists, it it so rare for me, that I am not willing to answer multiple questions about "system is trying to connect to the internet". Risk vs reward....Not worth it for me.

 

[pparks1]

May i ask why you don't care about outbound connection?

Well, I use a hardware based firewall which stops all unwanted in-bound traffic. I use an AV on my machine, malware bytes scans as well as Spyware Blaster. My AV never goes off, malware bytes never really finds anything. I run my box with UAC on. I don't use pirated software, warez sites, p2p's, or anything of the sort. If I do search for something on the web that is questionable, I either use a Linux machine (either vm or physical) or I use sandboxie.

So, in my personal world, I don't get malware..so there isn't that much to really protect going outbound.

And in my places of businesses, we almost have universally allowed outbound traffic to the internet without concern.

I've tried some 3rd party tools, like Comodo and Norton and I just find that when it squawks about outbound traffic, it's always a program trying to update or send some basic usage statistics...and I'm fine with those types of things. So, I'd rather not be bothered telling everything that it's ok. It's more of a pain that the gain is worth.

 

[gautam7]

Well, I use a hardware based firewall which stops all unwanted in-bound traffic. I use an AV on my machine, malware bytes scans as well as Spyware Blaster. My AV never goes off, malware bytes never really finds anything. I run my box with UAC on. I don't use pirated software, warez sites, p2p's, or anything of the sort. If I do search for something on the web that is questionable, I either use a Linux machine (either vm or physical) or I use sandboxie.

Well i must agree you have a very tight security arrangement, i personally like the concept of virtualization and sandboxing to remain safe. But your first post only said you use only windows firewall and never had problem which migt have given OP about wrong conception that only windows firewall can keep him safe. I am trying to say is we don't know what OP do in his machine and what are his security arrangment so i have pointed about the weakness about the windows firewall and now as your second post explains why some one don't need outbound protection because of use of layered approach. Now i think OP has all the necessary info to decide if he need or does not need windows firewall.

I personally like to have control over what software connect to internet and when i installed online armor during installation i opted the option trust everything ( Since i installed OA in a freah install) and now it does not bother me with too many notification.

 

[pparks1]

But your first post only said you use only windows firewall and never had problem which migt have given OP about wrong conception that only windows firewall can keep him safe.

Actually I said that I haven't had a need for any third party firewalls. And I don't. I use other security software and take other measures, but not 3rd party firewalls.

Now i think OP has all the necessary info to decide if he need or does not need windows firewall.

Yes, we have given the OP more information so he/she can make a better personal decision.

 

[severedsolo]

My two cents are that if you are behind a hardware firewall, there is really no need for a 3rd party software firewall. As pparks said, I am also in the camp of not caring about outbound, as I only use trusted software, stuff that I know what it's doing.

The Windows firewall is more than adequate for a machine behind a decent (and well configured) router. If you are really concerned about blocking all but trusted (by which I mean, stuff you personally allow) outbound connections, well Windows Firewall does that as well, with this Windows7FirewallControl: Sphinx Software

Having said that, if you aren't behind a router, then yes, I would recommend a 3rd party firewall, simply because Windows FIrewall leaves a couple of ports (443 off the top of my head, but there is another) always open because of Windows update and such.

Not to mention Windows Firewall is the only software firewall I know of that doesn't mess with Homegroups and Workgroups straight out of the box.

 

[Wishmaster]

If you are using legit, trusted software theres really no reason to worry about things .. " Calling Home"

I too am in the camp of not worrying about outbound.

Instead, I focus more on prevention, and monitoring whats coming IN.



The only reason to use a 3rd party, is if perhaps its included with a suite.
For example, Norton Internet Security likes to monitor everything and wants its own firewall in place.


But Windows Firewall is sufficient.

 

[FerchogtX]

So... after reading this, this means that I basically need to enable both firewalls, isn't it?... Well... setting ESET firewall to enable file and printer sharing while using any connection profile instead of restrictive mode will suffice... that's what I used before...

If I enable outbound protection, is Windows Firewall worth to use or I still need a 3rd party firewall? If answer is no, then there is no remedy but enable both ESET and Windows... I just wonder why Microsoft didn't think of this configuration problems in network profiles when disabling the Firewall...

Thanks for the advices guys

See ya!!

 

[JMH]

Hello FerchogtX

My recommendation would be to use the inbuilt Windows Firewall.
The firewall architecture was changed with Windows 7.
It is used on all computers here.

FYI Refer below...

Windows Firewall

Windows Firewall is a built-in, host-based, stateful firewall that is included in Windows Vista, Windows Server 2008, Windows XP with Service Pack 2 and later, and Windows Server 2003 with Service Pack 1 and later. Windows Firewall drops incoming traffic that does not correspond to either traffic sent in response to a request of the computer (solicited traffic) or unsolicited traffic that has been specified as allowed (excepted traffic). Windows Firewall helps provide protection from malicious users and programs that rely on unsolicited incoming traffic to attack computers. In Windows Vista and Windows Server 2008, Windows Firewall can also drop outgoing traffic and is configured using the Windows Firewall with Advanced Security snap-in, which integrates rules for both firewall behavior and traffic protection with Internet Protocol security (IPsec).

Windows Firewall

 

[FerchogtX]

Well... that help me more with this Firewall topic... your answer goes pretty well considering that researching more about ESET firewall, it seem that tat firewall indeed does the same as windows firewall, so you need to configure it to interactive mode so you actually block incoming or outgong data... basically does the same, so I guess I'll stick with your advice and severedsolo's by using the firewall configurator tool, I suppose thet tool actualy gives you warnings about incoming attacks, if so, it will be a great help for me

Besides this, I guess I will need to reinstall ESET, but this time the AV only, because the ESET firewall now gives me BSODs... what a mess...

Thanks for your advices, as soon as I solve my instalation issues, I'll mark this as solved.

See ya!!!

 

[rubyrubyroo]

I have had the same problems with xp and vista with eset in the past - they must not take customer's problems into account when they upgrade their patches?! I't almost not worth fooling, with just get a dif a/v suite.

but i realize thats not your real question...

As to the windows firewall, I have seen few tht can be "proven" much better esp in win 7's . And Outbound protection might seem like everyone else issue, but when you get a nasty infection, even due to no fault of your own, as I am going thru right now with a rootkit in win 7 x64 although the computer never opened a browser since its install activation. now it virtually streams keystrokes/screencaps and whatever it wants to multiple IP's, so IMHO (as of 4-5 days ago at least) OUTward firewall protection is a good idea. may not have helped me, but yoou can see my angle.

just my opinion, take it or leave it.

Mike

 

[FerchogtX]

I have had the same problems with xp and vista with eset in the past - they must not take customer's problems into account when they upgrade their patches?!...

It seems they don't even bother, specially with the firewall integration, that shoud be fully compliant with windows 7's... I mean, if it uses almost the same idea for networking places, why not integrating that feature with inbuilt system so you don't have problems with services and configurations around that?...

As I posted, I had to reinstall the ESET suite, it seems that firewall module went corrupt -somehow-, but now it's working... this time I installed version 5 (my old licence worked pretty well ) and it seems to work just fine, but also I left enabled windows firewall so I can change between public or private network and have instant acess to shared resorces whenever I need it (something just IMPOSSIBLE with ESET firewall without having to reboot)

THanks for all the help guys

See ya!!!