one firewall better than two

Hi,

Evidently, one firewall is better thatn two, I realise that they
compete, but I don't understand why this should be a problem.

Evidently, the same principle applies to anti-virus programmes.

Can anyone explain these facts to me?

Thanks

The primary problem is that in both instances these types of programs
intercept input/output at a very low level - in most cases by inserting
themselves into the actual routines that send data into and out of the
system - and having two of them competing to say "STOP! That's a possible
threat!" can cause system instability at the very least or freeze-ups and
reboots at worst.

You can have multiple antivirus programs as long as only one of them is
"active" in real-time scanning and all others are set for on-demand use.
But since firewall software doesn't offer this type of operating mode it is
never wise to have two software firewalls running.

If you don't trust your current firewall software, either replace it or
supplement it with a router that has hardware firewall protection.

--
Richard G. Harper [MVP Desktop]
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/


"species8350" <> wrote in message
news:36980a5b-36d2-48cd-ab79-...
> Hi,
>
> Evidently, one firewall is better thatn two, I realise that they
> compete, but I don't understand why this should be a problem.
>
> Evidently, the same principle applies to anti-virus programmes.
>
> Can anyone explain these facts to me?
>
> Thanks

No, two is not better than one. When programs compete for resources and file
access, the user is the loser.

If two firewalls are installed and actively monitoring network activity,
there will be (not may be) conflicts. Resources will be needlessly occupied
and detract from other functions.

Same principle applies to multiple av programs as well with one difference:
Two can be installed but only one should be resident and actively scanning.
The other can be used as an on-demand scanner to confirm what the first
finds or misses. Having two doing resident scanning is asking for trouble.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"species8350" <> wrote in message
news:36980a5b-36d2-48cd-ab79-...
> Hi,
>
> Evidently, one firewall is better thatn two, I realise that they
> compete, but I don't understand why this should be a problem.
>
> Evidently, the same principle applies to anti-virus programmes.
>
> Can anyone explain these facts to me?
>
> Thanks

In article <>,
philo <> wrote:
>
>You should use only one firewall
>

There can be only one! If you have more than one firewall
they try to chop each other's heads off so they can steal their life
essence. That's especially true if you run Scottish firewalls.

In article <O$>,
Rick Rogers <> wrote:
>
>If two firewalls are installed and actively monitoring network activity,
>there will be (not may be) conflicts. Resources will be needlessly occupied
>and detract from other functions.
>

Look, software firewalls generally suck. They're resource intensive,
hard to configure, and easy to subvert. Your main line of defense
shjould be a dedicated hardware firewall and the software firewalling should
be limited to simple packet filters.

My 2 cents...

Just don't try to run Scottish firewalls. They have this thing
about swords and head-chopping.

On Sun, 7 Dec 2008 22:07:24 +0000 (UTC), (the wharf
rat) wrote:

> Look, software firewalls generally suck. They're resource intensive,
>hard to configure, and easy to subvert.

Use a software firewall to protect against outbound access (unapproved
programs calling out FROM your system).

> Your main line of defense
>shjould be a dedicated hardware firewall and the software firewalling should
>be limited to simple packet filters.

Exactly - Use a hardware firewall (your router) to block inbound
access TO your network.


> My 2 cents...

Worth 4 cents (2 for each firewall)

> Just don't try to run Scottish firewalls. They have this thing
>about swords and head-chopping.

And they fight naked - definitely not for computers that kids use.

In article <>,
+Bob+ <> wrote:
>
>Use a software firewall to protect against outbound access (unapproved
>programs calling out FROM your system).
>

It doesn't, though... All the malware people need to do is
use an known port... Oh, those PC things that say "XXX.exe is trying
to dial out!!!"? The problem there is the same as with UAC: people
don't bother to examine the messgae and just click ok...

I can't stand zone alarm or any of that crap.

In article <36980a5b-36d2-48cd-ab79-
>, not_here.5.species8350
@xoxy.net says...>
> Hi,
>
> Evidently, one firewall is better thatn two, I realise that they
> compete, but I don't understand why this should be a problem.
>
> Evidently, the same principle applies to anti-virus programmes.
>

Conecting ropes,
one good knot properly created is always better,
than 2 either bad ones, either created incorrectly.

It applies to both FW/AV product and FW/AV configuration qualities.

Well, there is exception for not resident AV, running on demand only,
working as confirmation only.

In article <>,
>
>
> You should use only one firewall
> and only one AV program

Yes, using 2 FWs is like wearing two pairs of shoes. :-)

On Dec 8, 6:16*am, Poutnik <m...@privacy.net> wrote:
> In article <36980a5b-36d2-48cd-ab79-
> 358dd0c38...@j39g2000yqn.googlegroups.com>, not_here.5.species8350
> @xoxy.net says...>
>
> > Hi,
>
> > Evidently, one firewall is better thatn two, I realise that they
> > compete, but I don't understand why this should be a problem.
>
> > Evidently, the same principle applies to anti-virus programmes.
>
> Conecting ropes,
> one good knot properly created is always better,
> than 2 either bad ones, either created incorrectly.
>
> It applies to both FW/AV product and FW/AV configuration qualities.
>
> Well, there is exception for not resident AV, running on demand only,
> working as confirmation only.

Thanks to all for responding

Best wishes

S