Firewall recommendation
 

I know that there have been posts about this before, but the search turned up conflicting results. It seems that most people either recommended ZoneAlarm or Outpost. Some said that that the one that they didn't use caused funny problems. So... I'm wondering which one would actually be better. I'm looking for something that's easy to set new rules (preferably by a user firendly popup window a la McAfee). I'm running XP on an Athlon if that makes any difference.

By the way, do I need a firewall since I have a router? I think so, since <start bad metaphor> a router is like a stone wall around your computer with sections that can be either open or closed. The problem is that most routers don't guard those open sections. A firewall is like having security examining everything passing through. So with both, you block off most entries for hackers (router) and guard the open sections (firewall).

Well, now that I've rambled on and on, is my understanding of the topic correct? And which firewall is "better"?

Thanks

I got rid of Norton after my last format, and started using ZoneAlarm. It works great and is extremely user-friendly. Whenever a program starts that tries to access the world outside your PC, it alerts you and asks if you want it to do so. It also alerts you of any incoming threats.

But if you're running a router, you really don't need a software firewall.

the free version of Kerio 4.x; the main thing that the $40 gets you is the web-ad filtering. They give you a 30 day trial of that and I wanted to pay as soon as it expired but financial concerns have stopped me so far.

I am using Sygate.

Yes, most routers include firewalls in them. The issue is that most are turned off by default--you are going to go in and tell it exactly what to block. Its default is all open.

Personally, when it comes to computer security, I try to err on the side of paranoia. So that means taht not only do I have a router but I am also running a software firewall (zonealarm). I like zonealarm because if I get infected by any viruses, once my rules are setup, it will tell me if the program has changed since it last accessed the internet, and also tell me if something new (that I might not be aware is running) is trying to access the internet.
Besides, the software firewall may provide you with some extra time to patch/clean your system when new viruses/exploits come out.

I'm paranoid as well. I have a router and recently installed Zonealarm. So far I'm very happy.

I use Sygate Personal Firewall Pro it works great and i've had no problems with it. I've tried Norton, ZoneAlarm, McAfee and a few other and I like Sygates one the best.

Sygate was also recently tested as being the best "normal" firewall available (by a Dutch PC mag). It stopped most attacks thrown at it, while the rest didn't do so well at all. That included Zonealarm, which I was using before Sygate.

With a cable/DSL type router with NAT enabled you are handed a private IP that is translated out the the internet. This is good, as long as you don't have PAT enabled or have your machine sitting out on the DMZ. There is really no need for a firewall.

IF you want a good firewall, check out CheckPoint. One of the best!

As I see it, my router is my incoming firewall, and Sygate is my outgoing firewall. Anything that tries to go from my computer to the internet gets inspected - that should keep spyware/virii/trojan horses quiet.

Thats my plan too. I like being able to easily restrict what can access the internet, which is exactly what Sygate lets me do. Good piece of software.

Well, it's always a good idea to have a firewall - having the ability to do stateful packet filtering and packet analyzation is much better in terms of securing your computer than simply having it behind NAT.

For example, if there's a security flaw in your router and it gets compromised and set up to forward all ports to your computer - or if you do it yourself to play a game and forget to switch it back - you're unprotected.

Zonealarm Free Version.. Works for me, and Leo from Tech TV likes it also!

Yeah, that is something to considers. As I also mentioned in my advise to make sure PAT is off. But, like you said - anything can happen.

Well, I decided to go with Zone Alarm. Thanks again.

A day late and a dollar short, but since you are running XP you could have just turned on the WinXP Personal Firewall.

Yeah, I guess. But it seems that something that easy can't be as effective as a third party solution. But I could be extremely wrong. Oh well.

XP SP1's built in firewall is a bit lacking - but everything I've seen and read about SP2's firewall is that it should rival ZoneAlarm/etc.

If you want to try it out, either download Release Candidate 1 of SP2 from Microsoft's website, or wait until summer.