I've always used ZoneAlarm as my Firewall but I was just now questioning the necessity of it when my OS already provides me with a (FW). XP Prof
Would the integrated FW suffice or is there really an adv to having Zonealarm?
Thanks
Z
related question: If my goal was to gain on resources would getting a router eliminate completely my need for a FW?
Thus maybe freeing-up resources?
IMO, no, ZoneAlarm is complete overkill. For most people, outbound filtering is a complete farce as far as improving security goes. If something managed to get onto your system in the first place, then odds are very high that it's the result of some poor decision making on your part. I don't see any reason to think that someone who uses high risk software (e.g. Internet Explorer) is suddenly going to stop and think, "Hmmmmm... I wonder if I should allow this new app I've never seen before to access the network. Maybe I should go research it a little first." Odds are they'll just waive it right on through so that they don't have this pesky dialog box popping up.
The XP firewall is probably "good enough" for the majority of people out there. It stops most of the automated probes that people run looking for vulnerable systems. The rest is, and always has been, up to the user to defend against. The user has to know enough not to just let any old ActiveX control install if using Internet Explorer, and not to download stuff from suspicious websites no matter what browser they're using. A firewall will only do so much, and protecting a user from themselves isn't really on the list.
And as far as firewall duty goes, yes, a router would eliminate the need for a software firewall. But again, it's still up to you to do things like keep your system patched, not use high risk programs, don't download strange email attachments or files from anyone/where suspicious or dodgy. There's still quite a bit on you, the user.
his advice is sound, and worth taking note of.
I use ZA myself and I agree it takes up resources. But the Windows Firewall needs a bit more learning and I am lazy.
However the point about my post is that you will always get two sides to a question like that. So at the end of the day the choice is yours.
Mark
I find that Zone Alarm is very helpful in helping you to understand how a firewall works and identifies every program that operates through your internet connection. Each program that need to access the internet for whatever reason will create a popup the first time it needs access, allowing you to identify them and decide whether to allow them access or not. This can be very helpful when installing new programs and eliminating process hogs, slow downs and hangups created by certain usage intensive processes. You can see which programs are looking for updates when you load them and which ones will cause system hangs on startup.
There must have been a reason why you ever started using ZA; if it is still valid, why change? Comparing XP built-in protection to ZA depends on what ZA you are running - if it is the free version, you really need not have bothered (check out http://www.matousec.com/projects/proactive-security-challenge/results.php for a laugh) since it is just about good enough to watch the traffic go by.
What IMO Jimmy says generally does apply, especially in run-of-the-mill environment. I am on LAN attached to a university full of playful geeks (read: hackers) & would not go without Outpost. Before I bought it I was on XP only, and annoying things were getting through. Then again, if you do run ZA free & have had no trouble, you are fine anyway.
I have been using ZoneAlarm Security Suite for some years now and have never had a virus, or spyware. You can trust Microsoft firewall if you want, but remember how often Microsoft has to send out patches for there software. Because of this I just don't trust Microsoft to protect my Computer. I hope this helps.
Regards,
TMV
No offense, but your argument doesn't really make any sense, because a firewall isn't supposed to protect you against spyware and viruses. A firewall is a network traffic filter, nothing more, nothing less. You create rules about what traffic to allow, and what traffic not to allow. But none of that will stop you from downloading some rogue browser "helper" program or a virus infested file off of a P2P network.
A firewall could, and should, keep unwanted traffic OUT of your system, such as a hacker trying to get a foothold in your system. Keeping traffic in has very little benefit to the average person, because at that point the damage is already done. Odds are it's the result of a behavioral problem with the way the computer is used, and the system is teeming with other threats flying under the radar. At best in such a case, it's an early warning system that let's you mitigate SOME of the damage.
The XP firewall is simple, it's to the point, and it gets the job done as far as probably 99% of Windows users are concerned. It's not perfect, but nothing is. ZoneAlarm is completely useless if all you're going to do is click the "Allow" button every time you're prompted with a question.
A firewall is only as good as the rules that it follows, and in an attempt to try and convince people of it's value, ZoneAlarm has tried to make it more complex than it needs to be. Constantly peppering users with requests for attention, that they will eventually start to tune out. That AntivirusXP scam program exploited this fact by mimicking the appearance of Vista's UAC in many ways.
Many people might even be better off without a firewall, since that way they wouldn't feel a false sense of security, and as if they can do reckless things without fear of consequence. But honestly, some simple habit changes, and careful program selection, will do more than any firewall ever could for system security.
| Forum legend: | |
| Locked thread | |
| Moderator | |
![]() |
CNET staff |
![]() |
Samsung staff |
| Norton Authorized Support team | |
| AVG staff | |
| Windows Outreach team | |
![]() |
Dell staff |
| Intel staff | |