Windows outbound firewall implementation

[Anderson2]

Using Windows 7 Premium 64 bit.
I learned that the Windows 7 firewall also has outbound capability that is not turned on by default and that it can be turned on in its "Advanced settings". I've gone to that screen but do not see how to turn outbound on and I certainly do not know how to write outbound rules.
I used Zone Alarm in XP and that was easy to use. When a program tried to send something out, ZA asked me if I should permit it, this time only, or always.
Can I do something similar in Windows 7's firewall?
So my questions are:
a) how *exactly* do I turn on (or off) Windows 7' outbound firewall?
b) Is there a simple way to write the outbound rules for the W7 firewall without being a programmer or security expert?
Thank you

 

[manhunter2826]

Outbound setting can be turned ON in Advanced settings

Quite a nice article here if u wish to read:
What's new in the Windows 7 Firewall?

 

[CarlTR6]

Using Windows 7 Premium 64 bit.
I learned that the Windows 7 firewall also has outbound capability that is not turned on by default and that it can be turned on in its "Advanced settings". I've gone to that screen but do not see how to turn outbound on and I certainly do not know how to write outbound rules.
I used Zone Alarm in XP and that was easy to use. When a program tried to send something out, ZA asked me if I should permit it, this time only, or always.
Can I do something similar in Windows 7's firewall?
So my questions are:
a) how *exactly* do I turn on (or off) Windows 7' outbound firewall?
b) Is there a simple way to write the outbound rules for the W7 firewall without being a programmer or security expert?
Thank you

Outbound protection in the Windows firewall involves writing rules. There is a wizard to help. Personally, for me, it is too much of a hassle. I recommend you try the free Comodo firewall. Once you learn the interface, it works much like ZA. For me, it plays nicely with Win 7.

 

[The Howling Wolves]

IMO.....

I also use Comodo Firewall but I do not enable sandboxiie. I use it with MSE AV, SAS, CCleaner which keeps me pretty safe. I saw Microsoft Firewall and outbound feature but like Carl said "Too much hassle!"

 

[Anderson2]

Thank you all.
(Manhunter, love your name <g>).
A friend recommended "Windows7FirewallControl" from Sphynx. Has anyone used it? (Hope it is safe to use and not malware).

P.S. I just installed "Windows7FirewallControl" and it makes Windows outbound firewall work like any other firewall. When any app tries to access the internet, it pops up and asks me whether i should permit it and gives me various options. Seems to do the trick.

Hope it is safe to use.

 

[manhunter2826]

Thank you all.
(Manhunter, love your name <g>).
A friend recommended "Windows7FirewallControl" from Sphynx. Has anyone used it? (Hope it is safe to use and not malware).

{thanks Anderson }

A few other decent firewalls too:
Free Firewall Software ? Sunbelt Personal Firewall

http://www.online-armor.com/products-online-armor-free.php

Have a look here too -- Corrine's posts in particular are noteworthy.
http://www.sevenforums.com/system-security/26477-dark-side-comodo.html

 

[Anderson2]

Now I am wondering. I thought I was told (and assumed) Windows7FirewallControl was just a front end to Windows 7 outbound firewall. Are you saying it is a separate firewall? Similar to Zone Alarm and others?

 

[polarbear]

Thank you all.
(Manhunter, love your name <g>).
A friend recommended "Windows7FirewallControl" from Sphynx. Has anyone used it? (Hope it is safe to use and not malware).

P.S. I just installed "Windows7FirewallControl" and it makes Windows outbound firewall work like any other firewall. When any app tries to access the internet, it pops up and asks me whether i should permit it and gives me various options. Seems to do the trick.

Hope it is safe to use.

I added "Windows7FirewallControl" in Dec and really like it... GL

 

[CarlTR6]

Now I am wondering. I thought I was told (and assumed) Windows7FirewallControl was just a front end to Windows 7 outbound firewall. Are you saying it is a separate firewall? Similar to Zone Alarm and others?

It is not a separate firewall; it is a controller for Windows firewall. It works well and is safe.

 

[Phone Man]

Now I am wondering. I thought I was told (and assumed) Windows7FirewallControl was just a front end to Windows 7 outbound firewall. Are you saying it is a separate firewall? Similar to Zone Alarm and others?

It is a separate firewall but uses the same interface to the kernel.
Here is a note from their web site. If you liked Zone Alarm you will like it.

Windows7FirewallControl is completely based on Windows Filtering Platform (WFP), the security core introduced in Windows Vista and does not install any third party kernel drivers. The Built-in Firewall is based on the same WFP as well. The both products work entirely independently. Windows7FirewallControl uses the Built-in Firewall only once, at the first start to grab the initial settings. Due to complete product independence you can switch the Built-in Firewall ON or OFF at your option.

Jim

 

[Anderson2]

No wonder I am confused. I just got 2 responses. One said
"It is not a separate firewall; it is a controller for Windows firewall. It works well and is safe"
and the other said
"It is a separate firewall but uses the same interface to the kernel.
Here is a note from their web site. If you liked Zone Alarm you will like it."

I did like Zone Alarm and so far I like this one too. BUT I was always told not to run 2 firewalls at the same time.

 

[Greg S]

No wonder I am confused. I just got 2 responses. One said
"It is not a separate firewall; it is a controller for Windows firewall. It works well and is safe"
and the other said
"It is a separate firewall but uses the same interface to the kernel.
Here is a note from their web site. If you liked Zone Alarm you will like it."

I did like Zone Alarm and so far I like this one too. BUT I was always told not to run 2 firewalls at the same time.

It can be considered a separate firewall and in fact you can totally disable Win 7 firewall. As mentioned, Windows 7 Firewall Control uses Windows Filtering Platform as does a few other network protection software such as Malware Defender. One benefit of Windows 7 Firewall Control is the outbound prompts.

 

[Jacee]

Windows 7 Firewall Control works independently from the Windows 7 Firewall. It does grab the configuration at startup but does not communicate with the firewall after that.

 

[Phone Man]

The only problem I have with Windows 7 Firewall Control is the Action Center does not see it and if I turn off Windows Firewall it shows an alarm. So I just keep Windows Firewall turned on also. Along with my router I now have 3 incoming firewalls.

Don't you just love the sound it makes on an alert.

Jim

 

[Greg S]

The only problem I have with Windows 7 Firewall Control is the Action Center does not see it and if I turn off Windows Firewall it shows an alarm. So I just keep Windows Firewall turned on also. Along with my router I now have 3 incoming firewalls.

Don't you just love the sound it makes on an alert.

Jim

Yes, I'm not in favor of the Action Center thingy myself. I think at one time, it did register itself as being the installed firewall on Vista OS. About the sound alert, the latest version offers the choice to disable it, yea I did,lol.

 

[Anderson2]

Well, since "Windows 7 Firewall Control" is really a separate firewall (that plays nicely with Windows 7's own firewall) that begs the question: is it the best choice of free firewall to be used in W 7? For instance, I've noticed that unlike Zone Alarm (that I used in XP), it (at least the free version) does not keep logs of what it blocked or did not block. Also, I am not sure it stealthes or controls the ports like ZA did.
I've heard that ZA and Comodo both have problems in W 7 and I know this is a matter of opinion but I wonder what most people use to control outbound traffic since writing W7 outbound rules is a pain.

 

[Greg S]

Well, since "Windows 7 Firewall Control" is really a separate firewall (that plays nicely with Windows 7's own firewall) that begs the question: is it the best choice of free firewall to be used in W 7? For instance, I've noticed that unlike Zone Alarm (that I used in XP), it (at least the free version) does not keep logs of what it blocked or did not block. Also, I am not sure it stealthes or controls the ports like ZA did.
I've heard that ZA and Comodo both have problems in W 7 and I know this is a matter of opinion but I wonder what most people use to control outbound traffic since writing W7 outbound rules is a pain.

It's the best choice for me. Well actually the built-in firewall is the best choice for me but here's what happened. I installed the Plus version trial and used it's info to set up the rules for the built-in firewall and I did. It just so happened, I liked the plus version so much that I bought it. The plus version has a blocked.log which is kept in the Windows7FirewallControl folder. Wishlist would be to have access to it from the tray icon menu or ability to view it from within the control panel dialog. Most things that are blocked, you'll be presented with the popup dialog which gives you the option of applying the default which is fairly decent or you can select from another zone or you can make your own zone and use it.

On a side note, if you want similar protection that ZA or Comodo offers, meaning the addition of HIPS with their firewalls, then Malware Defender would be a great choice. Malware Defender 2.7 has just now gone free for everyone. It uses Window Filtering Platform for it's network protection but in addition to that you have alot more protection system wide with detailed logs.

 

[Anderson2]

Thank you very much. I am unfamiliar with Malware Defender and will therefore take a look at it even though I like Windows7FirewallControl and like you may buy the plus version. But I will look at Malware Defender first.
Thanks for the advice.

 

[CarlTR6]

Thank you very much. I am unfamiliar with Malware Defender and will therefore take a look at it even though I like Windows7FirewallControl and like you may buy the plus version. But I will look at Malware Defender first.
Thanks for the advice.

If you really want the best and solid protection; buy a router, even if you only have one computer. A router's hardware firewall is vastly superior to any software firewall. However, you will still need a software firewall if you choose to monitor outgoing.

 

[Anderson2]

You're absolutely right. I am on a home network behind a router. Always have been. It's not that I am paranoid, I just like to know who is sending stuff out from my PC <g>. Since using Windows7FirewallControl I "discovered" that Windows Media Player (which I never use) was attempting to reach the internet and stopped it. Maybe I'm a control freak, but I do not like things happening behind my back. (I've already turned off most of the Windows call home items I do not need).