Printable View
My computer is currently running with two firewalls (Bsafe, AVG). Windows Firewall says that it is not good to have more than one firewall running, because they may conflict. Why would they conflict, and if you can stop them from conflicting is it better than only having one firewall?
Ummm........BSafe, AVG, and MS Firewall makes 3 firewalls running which is 2 too many. One properly configured firewall is all you need in that deptartment. That does not make up for say scanning for spyware or running you AV program often. But as for firewalls, like I said, you only need 1 properly configured one.
Ryan
The point in not using multiple firewalls is well...if they're both software firewalls(considering a two case scenario),then they're basically doing the same job..i.e..blocking unauthorised access to anf from your comp..why have two applications do this when you can do the job properly with one?Also,one scenario of a conflict may arise when you set different rulesets for your two firewalls...e.g.allowing a particular program to access the net in the ruleset of one firewall while denying permission in the other.
Here's a decent beginner's article on the suject: http://www.informationweek.com/840/langa.htm
Hope it helped.
Cheers.
The previous comments are on the mark and...
If they do happen to coexist, having two software firewalls on the same computer is not like wearing two condoms. You don't get twice the protection. It is more like having two front doors on your house. Since they both do the same thing, let traffic in & out, why would you want to try to secure two? When one properly configured one reduces the opportunity for an uninvited guest or exploit.Quote:
...if you can stop them from conflicting is it better than only having one firewall?
!~cheers~!
Thanks for the information. I was just thinking that since they were from different companys some would block viruses that others wouldn't, but I guess I was wrong.
I beg to differ! Running two firewalls on the computer is like wearing two condoms! The two condoms (and this is true with firewalls) will rub against each other and the resulting friction will cause them to break (and not work correctly.) :DQuote:
Originally posted here by Relyt
The previous comments are on the mark and...
If they do happen to coexist, having two software firewalls on the same computer is not like wearing two condoms.
- Xierox ;)
:D :D
Oh my gosh - we could have a litter xieroxs running around then!
:)
OK, all seriousness aside now, I believe one of the best things you can do is to learn the different generations/types of firewalls available (Packet Filtering, Application Level, Stateful Inspection, Dynamic Packet Filtering, or Kernel Proxy) and select the type that is most appropriate for your needs. Then do some web surfing for comparisons completed by independent sources to find the company with the best record in all aspects. As mentioned earlier, a firewall must be properly configured to be effective.
cheers
Now there's a scary thought! :rolleyes:
I don't think you really know the difference between an antivirus application and a firewall. Here is a PDF document that you might find very informative reading. https://lawrencecentral.ltschools.or...ponentsFAQ.pdfQuote:
Originally posted here by metguru
Thanks for the information. I was just thinking that since they were from different companys some would block viruses that others wouldn't, but I guess I was wrong.
Welcome to the convoluted, inverted, and mad mad world of computer security.
If you're going to go with two firewalls, have one be a hardware firewall and the other a software firewall.
I agree with warriorfan808 on this.
2 firewalls...one hardware...one software.
IMHO...2 software firewalls will chew too many resources on the computer...
Offset it by running a firewall on the computer and sticking a firewall\router infront
Kinda like a condom,...and the pill, diaphram etc ;)
MLF
Yes, I do know the difference between a firewall and an antivirus program. I said block, not scan and detect, as in block the programs from communicating online. I was just origonaly thinking that a program made by one company (program 1) would block access to a program that another (prorgam 2) wouldn't, and program 2 would be able to block some that program 1 wouldn't, and more would be blocked that way.Quote:
Originally posted here by moxnix
I don't think you really know the difference between an antivirus application and a firewall. Here is a PDF document that you might find very informative reading. https://lawrencecentral.ltschools.or...ponentsFAQ.pdf
Welcome to the convoluted, inverted, and mad mad world of computer security.
Firewalls do not use signatures to detect which programs can access the internet or not. Therefore, running two firewalls will gain you no greater protection, because one firewall will not block programs from accessing the internet that the other firewall didn't catch because it didn't have a signature for that program.Quote:
Originally posted here by metguru
Yes, I do know the difference between a firewall and an antivirus program. I said block, not scan and detect, as in block the programs from communicating online. I was just origonaly thinking that a program made by one company (program 1) would block access to a program that another (prorgam 2) wouldn't, and program 2 would be able to block some that program 1 wouldn't, and more would be blocked that way.
If you have a decent, reputable firewall with outgoing protection, it should catch (and ask you if you want to allow) every attempted internet connection made by programs on your computer. If it doesn't, it is either a) not very good b) vulnerable to some sort of exploit which is allowing the program to bypass the firewall's control over your internet connection.
- X
Firewalls will not block viruses or trojans from entering your system. They will block worms, there is a difference.Quote:
Thanks for the information. I was just thinking that since they were from different companys some would block viruses that others wouldn't, but I guess I was wrong.
Back to the question of more than one software firewall. By having more than one you are actualy making your computer less secure. This is because you are adding another layer of compexity to your system and adding more complexity adds to your level of exposure to compromisation.
It just adds another application to your system that needs to be kept upto date and another application that may suffer from a vulnerability.
*sigh* Hey Relyt... in your next firewall post, would you mind pointing point that there is no such thing as a "hardware firewall"? This myth seems very prevalent.
There are firewall appliances (bastion host/dedicated firewall) and local firewalls... these may be any of the five types Relyt mentioned above.
Having multiple firewalls can be useful.... but only if they are of different types or serve different roles (controlling different network segments etc). Having two firewalls of the same type doing the same thing is just asking for trouble.
cheers,
catch
Catch,
I'd be happy to stress that point more. Also on the last one the words "Hardware & Firewall" were never used together, nor escaped my lips. That category is now:
;)Quote:
Dedicated Appliances:
cheers
Yeah, you've been good about that... I just singled you out, because you have that firewall series that seems to be the most widely read.
It just bugs me because people say "hardware firewall" as if that makes any indication of what type it is. (not to mention that it is the wrong term... and makes one think it must be refering to the OSI model)
cheers,
catch
Thanks guys for all the continuous information, I think everything is cleared up now :)