w3rdDave wrote:I don't use a software firewall... it's a waste of resources when I have a hardware box sitting out in front of everything.
UK wants backdoor into Windows Vista
-
Don Carlos
- Posts: 17514
- Joined: Thu Jan 01, 1970 12:00 am
Yea, if you have a good NAT box and know how to configure it and you're running AV software then you'll mostly be okay - as long as noone portscans you on a port that you actually have open.
The gyst of it is that you need intrusion detection, unless you have all incoming ports closed and have a NAT box. If you want to do that with a piece of hardware instead of a software firewall, that's fine too. I used to run a 2000 Server with NAT, and I could just TermServ into it to see the logs when I wanted and make changes, and that works great.
But if you're a typical user and just have a regular old out of the box router between you and the internet, then you need intrusion detection - be it a software firewall or an AV package that handles it. Because portscans and such can go through a broadband router no problem.
Another reason I personally like to have one, is I like to know for a fact exactly what is getting through and touching the NIC in my PC. I don't like just trusting that something else is doing its job.
The gyst of it is that you need intrusion detection, unless you have all incoming ports closed and have a NAT box. If you want to do that with a piece of hardware instead of a software firewall, that's fine too. I used to run a 2000 Server with NAT, and I could just TermServ into it to see the logs when I wanted and make changes, and that works great.
But if you're a typical user and just have a regular old out of the box router between you and the internet, then you need intrusion detection - be it a software firewall or an AV package that handles it. Because portscans and such can go through a broadband router no problem.
Another reason I personally like to have one, is I like to know for a fact exactly what is getting through and touching the NIC in my PC. I don't like just trusting that something else is doing its job.
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
WHAT DON'T YOU UNDERSTAND ABOUT THE WORDSriddla wrote:get a fortigate 50A bundle then piss on using a software firewall
regardless, if you have a good router/firewall with access lists and know how to configure it, software firewalls aren't all that necessary.
"AVERAGE USER"
Last edited by +JuggerNaut+ on Wed Feb 15, 2006 11:52 pm, edited 1 time in total.
corrected, because you're wrong. sp2 flashes up whenever an app tries to make an outbound connection and hasn't already been given a blanket A-OK+JuggerNaut+ wrote:i've not checked recent updates, but sp2's firewall was only monitoring inbound connections, not outbound. correct me if i'm wrong, kthx.
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
then it's been fixed. thanks. first firewall sp2 release was NOT like this.seremtan wrote:corrected, because you're wrong. sp2 flashes up whenever an app tries to make an outbound connection and hasn't already been given a blanket A-OK+JuggerNaut+ wrote:i've not checked recent updates, but sp2's firewall was only monitoring inbound connections, not outbound. correct me if i'm wrong, kthx.
What? Even their own description doesn't include average users:
"The FortiGate 50A supports an unlimited number of users, and is ideally suited for small businesses, remote offices, retail stores, broadband telecommuter sites, and many other applications. Special bundle includes 8x5 email support, anti-virus, intrusion prevention service, content filtering and anti-spam service for 1 year."
And I hardly think there is plenty of room for debate about whether the average user would pay $700 for something to connect them to the internet.
Where do you work, Hollywood?
"The FortiGate 50A supports an unlimited number of users, and is ideally suited for small businesses, remote offices, retail stores, broadband telecommuter sites, and many other applications. Special bundle includes 8x5 email support, anti-virus, intrusion prevention service, content filtering and anti-spam service for 1 year."
And I hardly think there is plenty of room for debate about whether the average user would pay $700 for something to connect them to the internet.
Where do you work, Hollywood?
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
-
+JuggerNaut+
- Posts: 22175
- Joined: Sun Oct 14, 2001 7:00 am
-
stocktroll
- Posts: 1314
- Joined: Mon Mar 21, 2005 2:44 am