Spyware, viruses, & security forum: Are two firewalls better than one or can it cause conflicts?

The Windows firewall is fine. It will do the job. If you prefer a different firewall, then you can turn off the Windows firewall.

It is not a good idea to run multiple firewalls, unless one is a hardware firewall (with a router) and one is a software firewall (which is what you are talking about). If you are not having difficulty with the Windows firewall, and you don't know enough to select one that is better, then you can just leave it running. It will do the job. If you later change your mind, you can always alter it in the future.

Two firewalls will sometimes (not allways) collide, thus stopping (or crashing) your system.

The longer version is - Two software packages - NO. A hardware firewall (like a router) and a software package - YES YES YES!!!

If you're running a software package (AVast, ZoneAlarm etc.) than you MUST tirn the windows firewall off. Most of them will ask you if you want them to make the move for you, so tell them yes, and they will take care of that.

Personally, I used to work with AVG Free for the antivirus and ZoneAlarm for a firewall. As it turns out, AVG grew so bug and luckily for me ZoneAlarm came out with a free firewall combined with a free antivirus, so I let AVG go and stayed with combined ZoneAlarm free package, which I'm very happy with. On top of that I have a router running it's hardware firewall, and everything works nicely together.

Since most of us use the Windows systems, I wouldn't concern myself with all those Mac or Linux users. They don't know anything about security or securing their systems and let me tell you - they are about to slapped in their faces - HARD!! (We're already seeing it with Mac users and computer viruses...)

In my opinion, which is based on over 35 years of industry experience, I tell you that the best way to go about it is not lying about and waiting, bur rather taking the proactive approach and getting ready for the assult - because it will come, mark my words!

Is what's going on in Iran a surprize? NO! It was expected!!! So be prepared. Always.

It is not a good idea to criticize a security software product because this shows a bias and complete lack of understanding for the limitation of software. Also, to give a person the idea that another one is better is not entirely correct.

All software, Firewall or otherwise, is not totally foolproof. In my years of experience, including talks on forensics (detection and protection), two offers more security than one. However, not on the same PC. What this means is that one follows the other where the first is a gateway PC (simply first line of protection like a gate keeper) and the next is the working PC. Because different software programs are programmed differently, if one misses the problem, the other is likely to detect it. Also, it has been shown that the same virus protection software when run a second time will sometimes find the problelm when missed the first time.

Now, many of us do not have this setup so running a different program that is designed to protect against the same problem is a good idea as long as the second does not conflict with the first so it is a good idea to disable the first before running the second then reversing the procedure to keep one active. As far as firewalls are concerned, a router is a next best thing many of us can afford, or are not experts in this field, to act as a type of gateway. I believe it is a good idea to have a router, even if not used for any other reason.

On the subject of protection, while I am at it, run a full detection from time to time, because when a quick one does not find the problem, I have found the full one does, even confirming a second run is a good idea.

I have to disagree: having Windows Firewall is not "fine". Sure, it blocks (most) INCOMING threats, but still does nothing to block unwanted outgoing communication.

firewall in software form. Mentioned elsewhere, a router has firewall properties base on NAT addressing but that is beyond the scope of your question. Do a search on the interwebs if you want to learn more about a network router. I do recommend a router even in a case of only one computer connected to high-speed internet for the added security of a hardware firewall. When configuring the router, look for firewall settings and enable if not already. Most software firewall installers will disable the Window's version. Look in Control Panel for Windows Firewall, click on the icon to launch program settings and disable if it is on.

On the software side, Window's version is okay but other options are available. The key feature to look for in a firewall is its out-bound data blocking ability. Blocking traffic from your system to the internet is vital in the event sneaky malware got on your computer it will attempt to call the mother ship for instructions. Blocking such communication is very important. There are many free products available so when you choose look for HIPS (Host Intrusion Protection System) as an added measure of security. HIPS works by monitoring normal system operation and tosses up bells and whistles when key areas of the OS are being manipulated by malware or a hacker.

No.

The same is true for active (launched and operating in the background) anti-virus programs.

I have tested enough systems, and watched what happens when a new program bumps into an old -- even the artifacts of that old Firewall you had thought you'd removed -- and it always spells disaster.

Most current anti-malware software uses heuristics rather than signatures to analyze behavior (firewall programs almost always used to do this and AV programs are starting to). There are too much malware out there, and mutating evey second as well as being replaced, to defend a machine by signature or signature-like detection only. The problem is that frequently the files that detect malware store up signatures of the malware that trigger other AV program where signatures are a factor; and heuristic detection can result in a behavior similar to what is being detected. The point is, you don't want your two defense systems each bringing your computer to a crashing halt and pointing fingers at each other.

Finally, Windows Firewall programs have been generally faulted as weak in some important areas, namely outgoing behavior. I'm not going to enter that debate -- I am merely reporting it.

Myself, I prefer third party software for the time being.

We see that there are two classifications so far: Hardware and Software. Actually, all firewalls are really software but people mean the kind that runs on your PC or the kind that runs on "some box". If you think about it, the firewall running on a "box" is, technically, software. When you just turn on your Windows firewall, you expect and receive some protection but not a lot. If you add another firewall on your PC, let's say, Symantec, you are getting something that you can control much better. Fortunately, the Symantec one "turns off" the Windows one so there is generally no conflict. Some software just manipulates the Windows Firewall.\

Now, what about the appliances (better than trying to argue if they are harware or software)? Thos usually let you make a lot of adjustments. In business (and in a few homes), the idea is to control what goes out to the internet from a private (LAN/WAN) network and to block things from coming into your network from the outside. Therefore, many businesses use TWO firewalls. Why? Because in between the two we have what is called the DMZ. Servers/computers in here are capable of going out to the internet and capable to working on the LAN/WAN. More important, the public can access a website on a computer in your DMZ in a safe manner (for you and the public) and the server in the DMZ will be able to access data and post data to a server on the local network safely because all packets will go through at least one of the firewalls.

The impotance is being able to look at and evaluate how the firewall works and how to configure it so that it will protect you while allowing you access to do what you need to do.

Dear Sir/Madam,
I actually have to firewalls and have no problem because the firewall is actually built into the motherboard of my PC which is a HP machine which uses the MCP61P chipset which is made by Nvidia and to access it you have to have the Nvidia NAM software installed to actually access the controls of the hardware firewall but I have tried to install this software but it always says wrong version but I don't use the softare so don't know if it conflicts with Windows Firewall or not but it is know to currupt downloads so I don't use it and there rely of the Firewall built into Windows XP.

including having access to settings that the Windows firewall just doesn't have. Many third party firewalls are more versatile, and they can do a better job than the Windows version does, but they are also often not user-friendly. A person who does not know anything about firewalls could easily become overwhelmed and just leave it at the defaults.

The only advantage of the Windows firewall is that it is carefree. You don't have to make any decisions or check out any settings. In spite of this, it does a decent job (at least in Windows 7). The best way is to learn about firewalls and select one based on what you learn, then set it up the way you need it. Unfortunately, not everyone is willing to do this.

Like many others in this thread have said, running Windows Firewall and another software firewall can cause conflicts. Luckily, most commercial firewall software will shut off Windows Firewall and you should be fine. Windows Firewall acts as a basic firewall and will do most of anything you need unless you think you need special control of the firewall or better logging. Personally, I use the Windows Firewall and the router connected to my Cable modem has a built in firewall (the 'hardware' firewall some have mentioned). Between these, Microsoft Security Essentials, Using Open DNS and being careful what links I click on, I think I'm pretty well protected.

If you do want to use a different Antivirus/Firewall check with some of the companies you do business with and see if they offer a discount. For example, my ISP offers free A/V, my bank offers free another, my insurance offers a third, and my work even offers access to a couple of different ones. There are also plenty of free A/V and firewall software out there, so lots to choose from.

So no more Internet security suite expense. Please advise.

Hi, It would seem that there are a lot of good answers here. As has been stated, Windows Firewall & a hardware firewall ( in the router ) is sufficient . From experience, I had tried two Firewalls in additon to the one in the router. More is not Better, as I could not even get on the internet until I uninstalled the additional Firewall I had installed. Again the Windows Firewall and whatever hardware Firewall is fine, just be sure to also use some Good A/V and Antispyware apps as well.

Hi Giuseppe, thank you for asking the same question that's been bugging me for over 2 weeks now. I received an alert from avast! free antivirus warning me that my computer is at risk unless i switch the avast firewall on. Im finding it very frustrating to follow the instructions they send me on email as to how install the firewall. Microsoft firewall is running and protecting me but my friends say it is not good enough and i have to use the avast firewall. I shall be following everyone's advice and opinion on this rather tricky subject. Thanks to everybody who has contributed thus far.
June

I liked the paid version of Avast, and especially the firewall. However, when I downloaded the update for my blu-ray player in my PC. Cyberlink blew up the Avast firewall. It didn't like it one bit, apparently. I have had problems in the past with Comodo blocking my MPAA DRM spyware, but that would only result in denial of my entertainment products.(this was the PowerDVD 10 update)

I had a really bad time fixing Avast after that - I had to uninstall with Revo and start over. This did fix it, but I'm back to free Avast, and I think I'll go back to Comodo for a software firewall.

Some folks may not realize that in Vista and Win7 systems with IAA endowed technology, the system is riddled with both hardware and software DRM, that is VERY unforgiving of mistakes. When you have something embedded in the hardware like that on your PC, it controls the whole ball game, and it don't like to be trifled with!(DRM=Digital Rights Management for you newbies)

Otherwise, this just goes to show what happens when two Juggernauts run into each other head to head!

I suppose it is too much bother. And then, of course, you could simply boot to a Live CD of Puppy Linux and happily compute with out any bother at all.