Page 2 of 2
Posted: Wed Feb 15, 2006 10:17 pm
by Don Carlos
Dave wrote:I don't use a software firewall... it's a waste of resources when I have a hardware box sitting out in front of everything.
w3rd

Posted: Wed Feb 15, 2006 11:49 pm
by R00k
Yea, if you have a good NAT box and know how to configure it and you're running AV software then you'll mostly be okay - as long as noone portscans you on a port that you actually have open.
The gyst of it is that you need intrusion detection, unless you have all incoming ports closed and have a NAT box. If you want to do that with a piece of hardware instead of a software firewall, that's fine too. I used to run a 2000 Server with NAT, and I could just TermServ into it to see the logs when I wanted and make changes, and that works great.
But if you're a typical user and just have a regular old out of the box router between you and the internet, then you need intrusion detection - be it a software firewall or an AV package that handles it. Because portscans and such can go through a broadband router no problem.
Another reason I personally like to have one, is I like to know for a fact exactly what is getting through and touching the NIC in my PC. I don't like just trusting that something else is doing its job.
Posted: Wed Feb 15, 2006 11:50 pm
by +JuggerNaut+
riddla wrote:get a
fortigate 50A bundle then piss on using a software firewall
regardless, if you have a good router/firewall with access lists and know how to configure it, software firewalls aren't all that necessary.
WHAT DON'T YOU UNDERSTAND ABOUT THE WORDS
"AVERAGE USER"
Posted: Wed Feb 15, 2006 11:51 pm
by seremtan
+JuggerNaut+ wrote:i've not checked recent updates, but sp2's firewall was only monitoring inbound connections, not outbound. correct me if i'm wrong, kthx.
corrected, because you're wrong. sp2 flashes up whenever an app tries to make an outbound connection and hasn't already been given a blanket A-OK
Posted: Wed Feb 15, 2006 11:52 pm
by +JuggerNaut+
seremtan wrote:+JuggerNaut+ wrote:i've not checked recent updates, but sp2's firewall was only monitoring inbound connections, not outbound. correct me if i'm wrong, kthx.
corrected, because you're wrong. sp2 flashes up whenever an app tries to make an outbound connection and hasn't already been given a blanket A-OK
then it's been fixed. thanks. first firewall sp2 release was NOT like this.
Posted: Thu Feb 16, 2006 12:30 am
by R00k
What? Even their own description doesn't include average users:
"The FortiGate 50A supports an unlimited number of users, and is ideally suited for small businesses, remote offices, retail stores, broadband telecommuter sites, and many other applications. Special bundle includes 8x5 email support, anti-virus, intrusion prevention service, content filtering and anti-spam service for 1 year."
And I hardly think there is plenty of room for debate about whether the average user would pay $700 for something to connect them to the internet.
Where do you work, Hollywood?
Posted: Thu Feb 16, 2006 2:05 am
by +JuggerNaut+
nice debate.
Posted: Thu Feb 16, 2006 4:32 am
by Dave
I'm going to get a PIX for my crib
Posted: Thu Feb 16, 2006 5:10 am
by +JuggerNaut+
Dave wrote:I'm going to get a PIX for my crib
i've got one.
riddla wrote:+JuggerNaut+ wrote:then it's been fixed. thanks. first firewall sp2 release was NOT like this.
of course it was, nothing's changed in terms of gui/functionality since the official release of SP2.
yeah, sp1. FIXED in sp2.
Posted: Thu Feb 16, 2006 7:51 am
by +JuggerNaut+
and i corrected myself. this is why i didn't go back and edit.
Posted: Thu Feb 16, 2006 8:08 am
by stocktroll
Grudge wrote:why would you need to encrypt your HDD in the first place, and why would anyone want to hack you?
lol @ average joe worrying about being H4XX0r3d
the same reason why noobs make blogs
they have an inflated sense of self importance as if anyone actually cares about them