Re: sharing a firewall?

From: N. Miller (anonymous_at_discussions.microsoft.com)
Date: 08/24/04 

Date: Mon, 23 Aug 2004 22:29:56 -0700

In article <ovjji0dfc4mfi49cqp577ccp1lcpmgevpd@4ax.com>, Hans-Georg Michna
says...

> The Windows XP Service Pack 2 firewall is quite good for the
> purpose, so I now leave it on even inside the network that is
> protected by an also quite good firewall in the DrayTek Vigor
> 2500 We ADSL router.

I am not going to recommend not using a firewall inside a LAN; indeed, I am
running Kerio Personal Firewall on the two computers on my LAN. I am just
uncertain of the mess that a conflict between KPF and ICF might create if
both were active at once. ICF does not provide outbound application control;
at least up until SP2. I've heard that MSFT did not add that to ICF in SP2.

What I was saying; that running both ICF *and* a third party firewall might
cause problems. Something to experiment with, for those who are geeks... 

-- 
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Relevant Pages

  • Re: ZoneAlarm Pro, Sygate Personal Firewall, or built in xp firewall?
    ... ICF monitors outbound ports to know what inbound ports to block/open. ... blocks unsolicited connection attempts. ... connect to the Internet but would not normally purchase a firewall from the ... baseline intrusion prevention mechanism in Windows XP. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Some programs seem to stop working after you install Windows XP SP2
    ... I have installed SP2 as many others I know of without any problem. ... your operating system before installing a service ... The KB references that the new SP2 will enable the built in ICF ... firewall which can interfere with some network applications. ...
    (microsoft.public.cert.exam.mcsa)
  • Re: Cannot ping LAN workstation
    ... I turned off the ICF on both computers but I cannot ping from computer A to ... I tried to reset the ICF but no success. ... Can I monitor the LAN card to check the problem. ... I have Symantec antivirus without a firewall. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Proposed Internet Connection Firewall change in WinXP SP2
    ... Of course a firewall is totally ineffectual against unintelligent ... I would advise you to look at alternatives to DCOM based ... Microsoft MVP ... >> available for management for ICF from group policy. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Baseline script (disable services etc.)
    ... > If anyone could give me any tips (as to turning on the ICF and disabling ... Disabling of services: ... Connection Firewall on a connection, ... Note that when using the EnableInternetFirewall/DisableInternetFirewall ...
    (microsoft.public.scripting.vbscript)