Getting a firewall installed on windows 7

[Ex_Brit]

I guess so but that isn't totally safe. I just got word from my McAfee colleagues that their beta Total Protection works on Windows 7 OK now. (Previously had issues with PC's using nVidia cards).

http://beta.mcafee.com/

That would give you both anti-virus and firewall protection.

 

[Yawn92]

comodo works fine for me now on the RC as long as I run as administrator in compatibility mode with vista. Also having to remember to uninstall it everytime I upgrade builds otherwise the upgrade fails and I get tonnes of BSOD's >>

 

[SIW2]

Hi howied,

Yes , you can use the Windows Firewall with it's default settings.

M$ obviously think it is safe, and millions use it like that.

If you want to add outbound control, Vista Firewall Control (free) will do it for you.

Vista Firewall Control : Sphinx Software

I use Windows 7 Firewall and Vista Firewall Control.

The only manual adjustment I have made is to block incoming ICMP (ping requests).

It gets a perfect score at **Home of Gibson Research Corporation**. Shields Up!

https://www.grc.com/x/ne.dll?bh0bkyd2

If you want to test yours at the above link, click Proceed and click Common Ports (or all ports , if you prefer).

You can also download Leaktest :

View attachment 10487

 

[howied]

Thanks SIW2! I will check out your info! Great link to check ports? I got a perfect score ...do I need to get the Vista Firewall Control? And if so, should I just dl the free version? I did get a penetration error on the leaktest test.

 

[SIW2]

Up to you - many people manage ok without it.

I prefer to see what is trying to dial out from my machine and choose whether to allow it or not.

You will fail the Leaktest without VFC installed.

Download it from my previous post - it is the .zip link in blue at the bottom.

 

[torrentg]

As far as I have tested, outbound control can be set manually without any 3rd party apps in windows firewall on 7. I set it to not allow winamp out, then confirmed it works using winamp itself. It could not access the internet, as I had wanted. The Vista Firewall Control though, is probably good for doing this to many apps. I only tried to use it once a while ago and admittedly, did not learn much about it.

All ya gotta do is go to outbound rules on the left, then click new rule on the right.

Does Vista Firewall Control alert you to apps trying to get out, like Zone Alarm does?

 

[howied]

Thanks!

Torrentg,
Thanks for the reply!

 

[shortmantuff]

Okay, I just downloaded VFC and know little about firewall connections and such. What should I allow to go outbound? Here is what I have configured now...

 

[shortmantuff]

Okay, I just downloaded VFC and know little about firewall connections and such. What should I allow to go outbound? Here is what I have configured now...

I just added Mozilla THunderbird to 'Enable All' also.

 

[SIW2]

If WFC pops up telling something is trying to connect - you have decide whether to let it.

It depends what programs you want to allow to connect.

If it is program you know and trust - like those already let thru on your screenie - or if it is something you don't recognize.

We can't tell you what those are.

 

[zipander]

Hi
Symantec endpoint protection works without problems, version later then 11.0 works with win7.
I´m running 11.0.5002.333 works great.

// Zipander

 

[shortmantuff]

If WFC pops up telling something is trying to connect - you have decide whether to let it.

It depends what programs you want to allow to connect.

If it is program you know and trust - like those already let thru on your screenie - or if it is something you don't recognize.

We can't tell you what those are.

Okay, so lets just say I went on a site through Firefox that had a 'virus' on it. This virus can get into my system and go outbound to the creater and steal my information (at least that is what I think happens, correct me if I am wrong). Would this program pop up as trying to do this or would nothing pop up because I allow Firefox to go outbound?

 

[brady]

nothing would pop up. It's already gained access to an allowed "rule".
botnets were designed for this

 

[Phone Man]

Quote from Windows7FirewallControll web site:

"Windows7FirewallControl is completely based on Windows Filtering Platform (WFP), the security core introduced in Windows Vista and does not install any third party kernel drivers. The Built-in Firewall is based on the same WFP as well. The both products work entirely independently. Windows7FirewallControl uses the Built-in Firewall only once, at the first start to grab the initial settings. Due to complete product independence you can switch the Built-in Firewall ON or OFF at your option."

I was under the impression it worked with Window FW but it is just a substitute interface to the underlying code (WFP) I am curious how other firewalls interface to the system and do they use WFP or do they install there own kernel drivers. Working through the WFP looks to be the safest since you are not modifying the kernel.

Jim