Disadvantage of Windows Firewall?

[Antonius]

I have always wondered, really, what is the disadvantage of using the Windows firewall, as opposed to a Zonealarm, Norton, etc., product? I mean, is there really a security difference or is it just features, etc?

 

[TopGun]

Windows firewall only blocks inbound connections, not outbound.
So if you download something that's a trojan, it's free to connect back to it's
servers.

That being said, if you're cautious and have a router with nat then a software firewall
isn't really necessary imo.

 

[GlobalFear]

Also, if you are going to use a software firewall, do use a decent one. Zonealarm and Norton products are practically legendary for being shit. Comodo is still my personal favorite, although I feel that it is largely unnecessary these days. Eset's Smart Security Suite is supposed to be quite nice as well.

 

[Antonius]

Thanks!

 

[Soullfytribe345]

Also, if you are going to use a software firewall, do use a decent one. Zonealarm and Norton products are practically legendary for being shit. Comodo is still my personal favorite, although I feel that it is largely unnecessary these days. Eset's Smart Security Suite is supposed to be quite nice as well.

I use the Eset's NOD32 and have their SSS on my dads computer. I have been very happy with the performance of both products. sorry if this is offtopic from the point of the OP =)

 

[devman]

Windows firewall only blocks inbound connections, not outbound.
So if you download something that's a trojan, it's free to connect back to it's
servers.

That being said, if you're cautious and have a router with nat then a software firewall
isn't really necessary imo.

Worth noting if you download a trojan and it roots your computer a software firewall isn't necessarily going to stop it anyway.

 

[Jay_2]

logging and a NAT router is the best way to do it.

 

[blackedge]

Curious: When did ZoneAlarm become shit? I haven't used it in quite some time, but I know at one point, even here, it was highly recommended..

 

[YeOldeStonecat]

Curious: When did ZoneAlarm become shit? I haven't used it in quite some time, but I know at one point, even here, it was highly recommended..

Years ago. I've (and kajillions of other IT techs) seen so many PCs hosed by ZA, and it's a pain to fully clean out.

 

[YeOldeStonecat]

Windows firewall only blocks inbound connections, not outbound..

Outbound protection added with Vistas firewall.

 

[blackedge]

Years ago. I've (and kajillions of other IT techs) seen so many PCs hosed by ZA, and it's a pain to fully clean out.

Well, as a tech, I haven't seen it, but then again, I've also been at the same client for the past few years, and don't see what some of the others see.

If I remember right, didn't they get purchased? I'm imagining that was the turning point..

I don't recommend ZA anyway any more.. Was curiosity more than anything else..

 

[MorfiusX]

Zone Alarm was purchased by CheckPoint.

 

[devman]

Outbound protection added with Vistas firewall.

but it has to be manually configured and it is a pain.

 

[calikool]

I have zone alarm. Seems to do a good job. I have used Comodo in the pass. I liked it but the damn thing would keep asking the same questions about certain programs accessing the network that I have already granted. After the buildup of questions in 10+ windows it's freaking annoying. It just doesn't remember your choices and it frustrating.

You would think when you choos that it is always ok, that woudl be the end of it. Nope.