Official answer to Avast Webshield & SygatePF?

[intimidator]

Ok....I have been reading many posts both here and at sygate in regards to this webshield issue and the sygate pro pf.   Now I am totally confused as to what the solution is.  Or is there finally a solution to this issue.

I have Avast Pro 4.6.652 and Sygate Pro 5.5.2710

What is the simple answer to this issue and how should people setup and configure these apps.

Do these apps play well together without making special configurations to each?

Thanks!

[Lisandro]

First, of course I'm not the official word, but this is a free forum anyway.
I worked with Sygate free and avast! Pro until I discovered a bug (?) / problem into Sygate when using a local proxy.
Some users tried to persuade me that it works ok. The bug (?) was recognized into Sygate forums. The problem occurs with both pro and free versions of Sygate.
I just migrate to another firewall.
If you do not use a local proxy (a annonymizer application for instance), don't worry. I think both work togheter very good.
Welcome to avast! forums 

[Mick Sturbes]

I use the standard Windows XP firewall of which there have been some postings here about it's reliability. I am however connected to the net via a router with a 'hardware' firewall so I presume I am reasonably safe and don't really need another 3rd party firewall...Or do I ??

[troubleshooting]

If u have hardware firewall...I guess there is not need of any 3rd party software firewall. or u can just disable the windows firewall and try like Zone alram suite Version 6..But if find any confilict with hardware firewall...then just remove the zone alram and enable widows firewall back.Acutally hadware firewall is the best protection as far as i know it..but i don't know if there is need for software firewall..? ???widows firewall acutally u can't configute that much.or even block outgoing programs,only incomming ones only.so that is why i am using zone alram.

I use the standard Windows XP firewall of which there have been some postings here about it's reliability. I am however connected to the net via a router with a 'hardware' firewall so I presume I am reasonably safe and don't really need another 3rd party firewall...Or do I ??

[intimidator]

Do not rely on the windows firewall....Yes, you are correct saying the best protection is behind a HW firewall but a 3rd party SW firewall is definitely needed...why?

The HW firewall protects your system from the outside or inbound traffic and does NOTHING for outbound traffic.....that is where the SW firewall is a must.

[DavidR]

I use the standard Windows XP firewall of which there have been some postings here about it's reliability. I am however connected to the net via a router with a 'hardware' firewall so I presume I am reasonably safe and don't really need another 3rd party firewall...Or do I ??

There is nothing wrong with the reliability of XP's firewall, it does what it was designed for protecting from inbound attack, it stealth's the ports very well making it appear your system is not connected to the internet. However it doesn't not provide full outbound protection, this allows anything that gets on your system the ability to phone home with your details and probably download more of the same.

A hardware firewall doesn't make you immune, it too in most cases doesn't have outbound protection (some do as they also have a software firewall program incorporated).

Your presumption could be leaving you vulnerable.

[Spiritsongs]

  To intimidator : Why do you not have Avast's latest
                              4.6.691 ? or Sygate's 5.6 ?

     To Mick Sturbes : I asked your question on the forums at
                                 www.aumha.net and several MVPs
                                (Microsoft Valuable Professionals ) highly
                                 recommendated the addition of a
                                "software" firewall, like Zone Alarm,
                                 Sygate, etc .

[Mick Sturbes]

[There is nothing wrong with the reliability of XP's firewall, it does what it was designed for protecting from inbound attack, it stealth's the ports very well making it appear your system is not connected to the internet. However it doesn't not provide full outbound protection, this allows anything that gets on your system the ability to phone home with your details and probably download more of the same.

I don't quite follow this, how can anything get 'on' your system if it is firewall protected be it Win XP, Sygate, or a hardware firewall to 'phone home and download' as you put it. Could you list some 'for examples' just so that I can understand this.

BTW I have Sygate installed now, I am just curious as to what is meant by 'outbound protection'
Thanks

A hardware firewall doesn't make you immune, it too in most cases doesn't have outbound protection (some do as they also have a software firewall program incorporated).

Your presumption could be leaving you vulnerable.

[Lisandro]

I am just curious as to what is meant by 'outbound protection'

The programs that connect from your computer to the outside world (Internet).
They could send personal and private information from you to them (outbound).

[DavidR]

[There is nothing wrong with the reliability of XP's firewall, it does what it was designed for protecting from inbound attack, it stealth's the ports very well making it appear your system is not connected to the internet. However it doesn't not provide full outbound protection, this allows anything that gets on your system the ability to phone home with your details and probably download more of the same.

I don't quite follow this, how can anything get 'on' your system if it is firewall protected be it Win XP, Sygate, or a hardware firewall to 'phone home and download' as you put it. Could you list some 'for examples' just so that I can understand this.

Deception or other tricks to trick the user into downloading a program, anything that you initiate/request will be allowed past your firewall, once in, it can then initiate downloads and can access the internet without outbound connection protection.

[Mick Sturbes]

Deception or other tricks to trick the user into downloading a program, anything that you initiate/request will be allowed past your firewall, once in, it can then initiate downloads and can access the internet without outbound connection protection.

Why the devious little critters  Thanks for that David, I understand now 

[Mick Sturbes]

OOh sorry thanks Tech as well. Is there anyway you can test your outbound vunerability - Like ShieldsUp in reverse ??

[Lisandro]

OOh sorry thanks Tech as well. Is there anyway you can test your outbound vunerability - Like ShieldsUp in reverse ??

I though you've forgotten me 
Reverse test? I mean you can just use TCPView (www.sysinternals.com) to see what is connecting or, easier, the firewall logs.

[Mick Sturbes]

I though you've forgotten me 
Reverse test? I mean you can just use TCPView (www.sysinternals.com) to see what is connecting or, easier, the firewall logs.

Whaaaaa Forget you !!........ Tech how could we 

Yep I will have a look through my logs, that will please the wife no end Thanks again.

[PigDog]

Switching to a different firewall is one workaround to the Sygate bug. 

I chose the other obvious option and switched off Webshield.

Still very happy with the level of protection the Avast! Sygate combination gives me.

PigDog