Re: XP SP2 and firewall

From: peter (pjar_at_hotmail.com)
Date: 08/23/04 

Date: Mon, 23 Aug 2004 05:52:24 GMT

Thanks Bruce for the explanation.
Sometimes you get advise from others, but I think it's up to the individual
to determined if it's good or not (like the one about uninstalling Symantec
firewall) didn't sound right to me.
But from the many response I am a little more educated now than before.

Peter
"Bruce Chambers" <bruce_a_chambers@h0tmail.com> wrote in message
news:eudLbmFiEHA.2788@TK2MSFTNGP10.phx.gbl...
> Greetings --
>
> The "next generation" Windows Firewall included with SP2, while
> vastly superior to the original ICF in terms of visibility, usability
> and configurability, is still rather lacking, as a solid security
> component. It still can't supplant 3rd-party solutions, nor is it
> intended to do so; rather, it's intended to complement them. And, like
> the original ICF, it will not monitor out-going traffic.
>
> It's most important virtues, I think, are it's improved
> compatibility with internal LANs and its configurability via group
> policies. Now, there's a simple, cheap tool that system admins can
> use to protect the LAN workstations from that occasional - but not
> rare enough - fool who manages to bypass the perimeter firewall and
> manually install some malware that could then spread throughout the
> LAN via shared drives.
>
> WinXP's built-in firewall is _adequate_ at stopping incoming
> attacks, and hiding your ports from probes. What WinXP also
> does not do, is protect you from any Trojans or spyware that you (or
> someone else using your computer) might download and install
> inadvertently. It doesn't monitor out-going traffic at all, other
> than to check for IP-spoofing, much less block (or at even ask you
> about) the bad or the questionable out-going signals. It assumes that
> any application you have on your hard drive is there because you want
> it there, and therefore has your "permission" to access the Internet.
> Further, because the ICF is a "stateful" firewall, it will also assume
> that any incoming traffic that's a direct response to a Trojan's or
> spyware's out-going signal is also authorized.
>
> ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
> built-in firewall, and are much more easily configured, and there are
> free versions of each readily available. Even the commercially
> available Symantec's Norton Personal Firewall is superior by far,
> although it does take a heavier toll of system performance then do
> ZoneAlarm or Sygate.
>
> SP2's Windows Firewall is intended to complement
> 3rd-party firewalls, so it won't hurt anything to leave it enabled
> whilst using another software firewall, but it also won't do much
> good, except as extra "insurance."
>
>
> Bruce Chambers
> --
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on having
> both at once. - RAH
>
>
> "peter" <pjar@hotmail.com> wrote in message
> news:0_MVc.11258$UYx.3680@twister01.bloor.is.net.cable.rogers.com...
>> SP2 has an updated fire wall built in, if one is using Symantec's
>> firewall, would there be a conflict with the two firewall?
>> Symantec internet security fire wall is running at the moment do I need
>> to disable before installing sp2? or disable sp2 firewall after the
>> installation?
>>
>> Thanks
>>
>
>

Relevant Pages

  • Re: Network Setup for SBS with 2 NICs Behind Firewall
    ... Have all the hardware in place when you set up and the install takes care of it all. ... It set up everything for internal / external lan, asking appropriate questions as it went along. ... That instantly compromises the whole LAN if the router / firewall is compromised. ... I ran SBS2000 with twin NIC's also, and found the incidence of issues on the LAN side for me were nil. ...
    (microsoft.public.windows.server.sbs)
  • Asus SLI Delux On Board NV Lan not working
    ... after i install nvidia firewall Lan port is not working. ... and firewall browser configuration is also not working, error is unable to connect to localhost:3476 ... i uninstalled the nv firewall and every thing and let windows xp detect nv lan while booting, ...
    (alt.comp.periphs.mainboard.asus)
  • Re: Using old computer as firewall
    ... Try MNF 8.2 (Multi Network Firewall) from Mandrake, easy to install, quite ... hard to put more than 6 lan adapters on the same ...
    (comp.security.firewalls)
  • Re: Firewalls
    ... firewall, such as Sygate or ZoneAlarm, that can detect and warn the ... not scan for or protect you from adware/spyware, because, after all, ... manually install some malware that could then spread throughout the ... LAN via shared drives. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Firewalls
    ... firewall, such as Sygate or ZoneAlarm, that can detect and warn the ... not scan for or protect you from adware/spyware, because, after all, ... manually install some malware that could then spread throughout the ... LAN via shared drives. ...
    (microsoft.public.security)
Quantcast