Avast WEBforum
Other => General Topics => Topic started by: Cast on April 15, 2011, 12:56:53 AM
-
Just wondering if anyone has a suggestion for a firewall, ive looked at a few(Privatefirewall, Online Armor, Comodo, and few others). Ive used comodos before with there cis but it seems to use a lot of memory to me, and im currently trying private fire wall, so far theres nothing i dont like about it.
-
There is nothing wrong with Windows Firewall. The problem with most good 3rd party firewall is that they contain a HIPS product which will interfere with Avast's own behavior shield. Windows Firewall has come a long way since XP. Also if your behind a router your even more protected. Comodo,Online Armor,PC Tools and Outpost are all very good 3rd party firewalls. But keep in mind that each one will give you tons of pop ups. If you want to spend your days clicking "Allow" or "Block" try anyone of them. Its your call but there are better ways to make your pc safer other then adding a 3rd party firewall and packing on more processes which consume your ram.
http://www.wilderssecurity.com/showthread.php?s=0809e15cc8eb4b51c410adf076c6f027&t=239750
-
well i am behind a firewall on my router, that was another question i had since my friend also said that the default windows firewall should be fine if your behind a router.
-
I recommend ZoneAlarm Free. http://www.filehippo.com/download_zonealarm_free/
Or
Windows 7 Firewall Control Free. http://sphinx-soft.com/Vista/order.html
There are versions for XP, Vista & Windows 7 32bit and Vista & Windows 7 64bit.
-
The built in Windows fw and router fw's don't have outbound protection.
Windows 7 Firewall Control Free adds outbound protection to the Windows fw and/or router fw. ;)
-
ZA Free is a joke. Ii is no better then Windows XP firewall and worse then Windows Vista/7 firewall. With Windows 7 Firewall set to Advanced I can score a 230/340 on the Comodo CLT test. But with ZA Free I get a 150/340. Also ZA is right down on the bottom of Matousec testing. ZA Pro is good but the free version is horrible. Windows Firewall Control is good but extremely chatty. Out bound protection is over rated and YES Windows Vista/7 Firewall does have outbound protect when properly configured. Even without using a guide to configure it you still get outbound control.
-
ZA Free is a joke. Ii is no better then Windows XP firewall and worse then Windows Vista/7 firewall. With Windows 7 Firewall set to Advanced I can score a 230/340 on the Comodo CLT test. But with ZA Free I get a 150/340. Also ZA is right down on the bottom of Matousec testing. ZA Pro is good but the free version is horrible. Windows Firewall Control is good but extremely chatty. Out bound protection is over rated and YES Windows Vista/7 Firewall does have outbound protect when properly configured. Even without using a guide to configure it you still get outbound control.
Matousec tests HIPS, not firewalls.
Just because a fw doesn't have HIPS dosen't make it bad. The avast! fw in AIS doesn't have HIPS.
ZA Free is the best free fw.
-
Matousec does not test just HIPS. Its a firewall testing company but in today's age most firewalls have HIPS. Download the Comodo CLT test and give me your test score in a screen shot. I bet its not more then 200. ZA Free was good about 8 years ago.
-
ZA Free is a joke. Ii is no better then Windows XP firewall and worse then Windows Vista/7 firewall. With Windows 7 Firewall set to Advanced I can score a 230/340 on the Comodo CLT test. But with ZA Free I get a 150/340. Also ZA is right down on the bottom of Matousec testing. ZA Pro is good but the free version is horrible. Windows Firewall Control is good but extremely chatty. Out bound protection is over rated and YES Windows Vista/7 Firewall does have outbound protect when properly configured. Even without using a guide to configure it you still get outbound control.
That is a very poor example, as much as I'm no fan of ZA it has to be better than the XP firewall as that has zero outbound protection.
When you use daft statements/examples like this it depreciates the rest of your comments, but then you compound it by saying outbound protection is over rated.
Any malware that manages to get past your defences will have free reign to connect to the internet to either download more of the same (we see plenty of cases like this in the viruses and worms forum), pass your personal data (sensitive or otherwise, user names, passwords, keylogger retrieved data, etc.) or open a backdoor to your computer, so outbound protection is essential.
Connections made from your system, if not challenged by the outbound protection of your firewall are allowed back in unchecked by your firewall.
We see lots of cases of the network shield blocking outbound connections to known malicious sites, so if is wasn't taking up the slack (or that site wasn't currently on the malicious sites list), if you didn't have a firewall with outbound protection security is breached.
Kind of blows a hole in the outbound protection being overrated, tell that to those experiencing this in the viruses and worms forum and see if they agree.
The one thing I do agree with is that ZA free is most certainly not the best free firewall.
-
The Vista and Win 7 fw's don't really have any worthwhile outbound protection.
When the are properly configured they do have outbound, but you aren't notified, so its worthless, IMO.
-
The Vista and Win 7 fw's don't really have any worthwhile outbound protection.
When the are properly configured they do have outbound, but you aren't notified, so its worthless, IMO.
Not true at all with a little add on. Also what do you need to be notified of? Thats why there are logs. Any good advanced computer uses should have full knowledge of every process and service on his pc.
If something wants out which should be allowed out its already too late. ZA Free CANNOT protect you any better then Windows Visat/7 Firewall. Thats a fact.
-
When making a fw recommendation one must consider a person's skill, knowledge and understanding of fw's.
ZA's user friendlyness is a safe recommedation.
-
I gave up on ZA free years ago. it turned into bloated up junk. It was a pain to network and constantly had to be tweaked for the network to work. I use Comodo free with no problems.
Joe
-
When a member asks a question we should provide them with the best answer possible. Recommending an inadequate firewall is NOT a good way to treat our members.
Thats like telling somebody to use ClamWin for a good free av.
-
ZA's user friendlyness is a safe recommedation.
Agree. ZA is user friendly.
I just think there are better ones.
In my personal opinion:
Comodo (http://www.filehippo.com/download_comodo/) (Defense+ is HIPS and you should configure it to a comfortable level for you).
Online Armour (http://www.tallemu.com/free-firewall-protection-software.html)
OutPost Free Security Suite (http://free.agnitum.com//)
-
ZA Free CANNOT protect you any better then Windows Visat/7 Firewall. Thats a fact.
One of my nephews was sent a malicious file with yahoo im that infected his laptop. He was using the Win7 fw.
I was finally able to get him to install ZA Free. On next day he was sent another file, but ZA popped up asking if he wanted to allow it, he quickly clicked NO.
ZA Free saved the day. :)
I still can't keep him away from Yahoo im. :(
-
ZA Free CANNOT protect you any better then Windows Visat/7 Firewall. Thats a fact.
But it is much more easy to configurate and use.
Also allows outbound protection with easy.
-
If ZA Free was is so great then download this test and show me your score. I can score higher with Windows 7 Firewall then with ZA Free installed. Keep it simple. Windows Vista/7 Firewall w/Advanced Security and a router w/NAT is all you need. Why does everyone want to pack on so much extra processes and ram usage to there pc. ::)
http://www.testmypcsecurity.com/securitytests/firewall_test_suite.html
And what exactly was the malicious file sent through Yahoo Messenger? Why didn't your real time av stop it? How do you know it was malicious? I would tend to look at what kind of friends you nephews is chatting to that are sending him malicious files.
-
i recommend comodo firewall rather than zone alarm :D but its your personal choice......
-
Here is a very good article.
http://www.techsupportalert.com/best-free-firewall.htm
http://www.brighthub.com/computing/smb-security/articles/38214.aspx
-
i got 120/340 with the clt with the windows firewall, if i were to go with a 3rd party firewall, id prefer one that has good protection and be light on ram and such
-
Well I have tried ZA firewall free but find it difficult and inadequate for me that why I chose Outpost Firewall Pro.
I feel extremely confident online with it. And why not???? As Bullguard,AVG,SophoX and many other uses firewall from Agnitum's Outpost. If these companies are relying on Outpost Firewall then why not me..??
-
i got 120/340 with the clt with the windows firewall, if i were to go with a 3rd party firewall, id prefer one that has good protection and be light on ram and such
There is no way you got a 120/340. Windows 7 firewall and Vista firewall are just about the same. With Windows 7 firewall set to advanced security I get a 230/340. Vista firewall should get about the same. Previous firewalls have already been mentioned to you. Take your pic but be warned.
-
i got 120/340 with the clt with the windows firewall, if i were to go with a 3rd party firewall, id prefer one that has good protection and be light on ram and such
There is no way you got a 120/340. Windows 7 firewall and Vista firewall are just about the same. With Windows 7 firewall set to advanced security I get a 230/340. Vista firewall should get about the same. Previous firewalls have already been mentioned to you. Take your pic but be warned.
thats what i got, i can take a SS for u or post the log.
-
Watch my score with Outpost firewall Pro 7.5 beta 2
(340/340)
Yaahooooooooooooooo
I will suggest you to buy Outpost Firewall as its now offering lifetime license in price of one year..
-
There is no reason to buy any firewall.
-
Watch my score with Outpost firewall Pro 7.5 beta 2
(340/340)
I get the same score with my old Comodo FW... ;)
-
There is no reason to buy any firewall.
I feel the same.
Ashish Singh, about the leak tests limitations: http://forum.avast.com/index.php?topic=29259.msg247460#msg247460
-
Ya i read that already... ;D
-
Well i choose a firewall finally, Online Armor since i seemed not to be able to configure the others to get above 120.
-
Comodo,OutPost and Online Armor should all be able to give you a 340/340 out of the box. OutPost when first install has a learning mode which will allow just about everything outbound for the first few days. You need to turn that off. Comodo should be set to proactive mode. As far as OA when I tested version 5 I got a 340/340.
-
Well with Comodo i only got ~120, and that was with default settings, and with online armor i got 320/340, outpost was the next best with 230
-
Ya i read that already... ;D
Ok.
People continue to give that much credit for leak tests anyway... I've got this, you've got that...
-
Ya i read that already... ;D
Ok.
People continue to give that much credit for leak tests anyway... I've got this, you've got that...
well im not sure how else to test it since id rather it not be a hacker getting past it.
-
Well with Comodo i only got ~120, and that was with default settings, and with online armor i got 320/340, outpost was the next best with 230
Something wrong with your pc and or installs then.
-
could be something with my computer, but i tried two different installs of comodo, one from the cis install that i have on my external harddrive and another freshly downloaded from their site
-
Well with Comodo i only got ~120, and that was with default settings, and with online armor i got 320/340, outpost was the next best with 230
I got 340/340 with outpost firewall pro 7.5
I know i know... leak test is not inportant... ;D
-
could be something with my computer, but i tried two different installs of comodo, one from the cis install that i have on my external harddrive and another freshly downloaded from their site
You don't download CIS cause that contains CAV. You need to download the stand alone firewall. Either way if Comodo cannot pass its own test its not Comodo but your pc. Also unless you clicked "block" on every single pop up the test is invalid. Most likely you ran the test incorrectly.
-
could be something with my computer, but i tried two different installs of comodo, one from the cis install that i have on my external harddrive and another freshly downloaded from their site
You don't download CIS cause that contains CAV. You need to download the stand alone firewall.
You can choose whats being installed, in other words i know that and didnt install the av...
also i didnt get any options to block pops when i was using it.
-
You can also run some tests on your FW (other than leak tests) if you are concerned:
- Check for being ports being stealth with Security Metrics: https://www.securitymetrics.com/portscan.adp (https://www.securitymetrics.com/portscan.adp)
- PC Flank Tests (a variety of tests on this page): http://www.pcflank.com/scanner1.htm (http://www.pcflank.com/scanner1.htm) - see tests available on left side of page.
Let us know if you have any further questions. Thank you.
-
I did a virus total scan on the comodo leak tester and it came up with trogans and other malware...
[link]
http://www.virustotal.com/file-scan/report.html?id=73a4e56396833c153f104aafdf072bdccbe39cecf4673180590a2a93e62952f6-1303095966
also I run comodo fw but it isn't safe to use multiple fw's is it?
they'll probably conflict right?
just curious :D
-
The CLT test is NOT a virus. ::)
-
I use comodo too and I got 150/340 :o probably cause my defense plus is off.
-
Hence the reason why you dont disable a HIPS in a product. D+ is the back bone of Comodo.