Re: Firewalls and Wireless Routers

From: NoWaySpammers (davecrispy_at_hotmail.com)
Date: 12/30/04 

Date: Thu, 30 Dec 2004 22:10:32 +0100

So - Install ZONE ALARM, disable the XP Pro SP2 Firewall and leave the
router WEP as is?

Have I got that right?

"John Doue" <notwobe@yahoo.com> wrote in message
news:%23GM8aLr7EHA.3836@tk2msftngp13.phx.gbl...
> Leythos wrote:
>
>> In article <ObBaEDr7EHA.2180@TK2MSFTNGP12.phx.gbl>,
>> davecrispy@hotmail.com says...
>>
>>>If I have a wireless router installed and working and configured with a
>>>WEP firewall.
>>>
>>>The question is - can I safely stop using the built in firewall with
>>>Windows XP Pro SP2 and rely on the one in the router?
>>>
>>>Seems a bit silly having a firewall in the router and on both the desktop
>>>and laptop!
>>
>>
>> If you have a wireless router I would guess that it's not actually got a
>> firewall, just NAT, so you don't really have a firewall - none of the
>> home user units are really firewalls, just nice little NAT systems.
>>
>> Since the XP SP2 firewall is really open to being improperly configured
>> you're not doing much with it that isn't already being handled by the NAT
>> box. If you want to have a firewall, either purchase something like the
>> WatchGuard Firebox SOHO unit or install something like ZoneAlarm.
>>
> One other point in support of this is that SP2 firewall will not control
> in any way Internet trafic going OUT of your computer. Your NAT protects
> you nicely from incoming unwanted access but does not control what goes
> out. There are many reasons you want to keep a very strict control on what
> goes out since it is a way to detect trojans and other pests activity and
> to keep a lid on those programs that surreptitiously try to access
> Internet for various but seldom valid reasons. I see no reason not to
> Choose Zonealarm but I would suggest you go for the SE version that
> includes AD-Watch even if it costs a few bucks because it does a good job
> at detecting attempts to make changes to the various start sections of the
> registry.
>
> Regards
>
> --
> John Doue