Which Firewall is best for Vista?

Discussion in 'Windows Vista Security' started by Mike Dymond, Jun 29, 2007.

  1. On Tue, 3 Jul 2007 22:38:21 -0700, "David Beder [MSFT]"
    That brings me to a problem with firewalls (and other software) and
    the processes they attempt to identify...

    1) Wrappers

    Malware can act as the hand in a glove puppet if it can operate within
    a container process, and process tracking just tracks the container:
    - Explorer, IE, 3rd-party integrations e.g. BHOs, Word macros
    - generic launchers e.g. RunDLL, SVCHost

    2) Injection

    If code injects itself into an in-memory process without "infecting"
    the on-disk code file corresponding to that process, then will the
    process be detected as altered?

    3) ADS

    If code is run as an ADS attached to some arbitrary file, is the
    process tracked as the arbitrary file, or differenrtiated from it?

    MD5-checking executable files doesn't help if the file you are
    checking is not the (only) code that is running.

    With respect to (3), I've tested this and seen XP's Task Manager
    reporting my ADS as just the name of the file I attached it to. I've
    seen ITW malware use of ADS attached to all sorts of files such as
    Win/ini, System.ini and legit OS components.... beats me why the OS
    allows code to run in an ADS in the first place.

    I generally avoid the ADS mess by using FATxx instead ;-)
    Hopefully with some OS help, i.e. more accurate process reporting?
    Error( BFE ): Context not found - is that Boot Firewall Engine?
    OK, that I've seen before :)


    On the 'net, *everyone* can hear you scream
     
    cquirke (MVP Windows shell/user), Jul 7, 2007
    #21
    1. Advertisements

  2. Mike Dymond

    Weagle Guest

    WINDOWS Firewall is the only one, you should use, believe me.
     
    Weagle, Jul 14, 2007
    #22
    1. Advertisements

  3. Mike Dymond

    louis Guest

    norton
     
    louis, Jul 15, 2007
    #23
  4. Mike Dymond

    katrinnka Guest

    Personally, i had symantec with win98, i was happy with that after learning
    and i am still learning daily. I am still learning vista ultimate with
    Mcafee (i was advised to buy this as a package deal and hesitated but i did)
    as any new win ver goes, you have a learning period and that can be total
    frustration and we all know that learning a new thing is not easy for
    everyone. I was happy with win2000 and win98 I think if you took some
    classes, you are ahead of the game. Knowledge is power. Your preferences will
    not be the same as anyone elses. A CHEVY is not comparable to a VW or a
    Jaguar if you get my drift. Call the pros your buying from is my best
    opinion, and remember that you have a learning curve and remember that you
    need to "take time" and that thought will help with the frustration because
    the learning time is frustrating since you don't have the answers and you
    have to "figure stuff along the way" :)
     
    katrinnka, Jul 16, 2007
    #24
  5. Mike Dymond

    Spenxer Guest

    Kaspersky !!!!!!!!!!!!


     
    Spenxer, Jul 19, 2007
    #25
  6. Mike Dymond

    OUTLAW80 Guest

    Zone Alarm is not compatible with mMcAfee anti virus

     
    OUTLAW80, Jul 20, 2007
    #26
  7. Mike Dymond

    christopher Guest

    hi:
    how do you do?
    ____________________________________________________________________
    I think that firefox is best for windows vesta! what do you think?
    ____________________________________________________________________
     
    christopher, Jul 22, 2007
    #27
  8. Mike Dymond

    IS&S_Student Guest

    I recommend the Cisco ASA 5505. It features a DMZ Port, Firewall protection,
    VLAN support, and VPN. It costs around $400 - $450. I just replaced my old
    Cisco PIX Firewall with it and am very impressed with it's features and ease
    of use.
     
    IS&S_Student, Jul 22, 2007
    #28
  9. Mike Dymond

    2498dave Guest

    Hi: I have just upgraded to Vista Premium From XP Pro.I had AVG Professional
    Internet Security. I also had the disc. just installed off the disc . and it
    was a dream .it includes virus spam firewall .ect. I can only speake as i
    find. I had Norton suite on another machine and that didn't do well atall
     
    2498dave, Jul 25, 2007
    #29
  10. Mike Dymond

    winnifred Guest

    --
    winnifred


    As you will see I am very new to computing. I just bought a lap top with
    Vistam home premium and also has Norton. It states somewhere in the security
    section 2 firewalls running at same time may conflict. Should I only be
    running windows firewall or just norton?
     
    winnifred, Jan 27, 2008
    #30

  11. I think you will find that very few people will recommend any Norton
    product, anymore.

    As it is, Vista's built-in firewall solution is more than adequate
    for most consumers' needs. While it's not quite up to the ease-of-use
    standards of Kerio or ZoneAlarm, it has been noticeably improved over
    WinXP's version.

    There are two interfaces for Vistas built-in firewall:

    1) A simplified one accessed through the Control Panel that is the only
    one most people see. To further supplement this view, Sphinx's Vista
    Firewall Control http://sphinx-soft.com/Vista/) is a piece of freeware
    that makes the Vista Firewall much more useful to the average user.

    2) And the more advanced "Windows Firewall with Advanced Security
    (WF.msc), accessed via the Start Menu's Administrative Tools folder, for
    the experienced user who wants more granular control.



    --

    Bruce Chambers

    Help us help you:
    http://www.catb.org/~esr/faqs/smart-questions.html

    http://support.microsoft.com/default.aspx/kb/555375

    They that can give up essential liberty to obtain a little temporary
    safety deserve neither liberty nor safety. ~Benjamin Franklin

    Many people would rather die than think; in fact, most do. ~Bertrand Russell

    The philosopher has never killed any priests, whereas the priest has
    killed a great many philosophers.
    ~ Denis Diderot
     
    Bruce Chambers, Jan 27, 2008
    #31
  12. Mike Dymond

    Mark Guest

    For the price of a firewall or AV suite, buy a router.
    You don't have to update it, or pay annual subscriptions.
    You can make it very secure or lightly secured.
    You only have to do it once. And, if you decide to have more than one
    computer, networking is a breeze.

    Then, use Window's built in firewall. (Because it's there, it's effective
    and free.)
     
    Mark, Jan 27, 2008
    #32
  13. Windows Vista's built in firewall has always been adequate for me.

    --
    --
    John Barnett MVP
    Associate Expert
    Windows - Shell/User

    Web: http://xphelpandsupport.mvps.org
    Web: http://vistasupport.mvps.org

    The information in this mail/post is supplied "as is". No warranty of any
    kind, either expressed or implied, is made in relation to the accuracy,
    reliability or content of this mail/post. The Author shall not be liable for
    any direct, indirect, incidental or consequential damages arising out of the
    use of, or inability to use, information or opinions expressed in this
    mail/post..
     
    John Barnett MVP, Jan 27, 2008
    #33
  14. Windows built in firewall is great for most purposes.
     
    Dustin Harper, Jan 27, 2008
    #34
  15. Mike Dymond

    Brink Guest

    Brink, Jan 27, 2008
    #35
  16. Mike Dymond

    Dag Korsnes Guest

    Just remember to close it before you install a new program. After
    clicking 100 times at the "OK" button to let some file access internet
    you get tired. Be sure to shut down Comodo before you install the new
    program, or you might be in an endless loop of letting Comodo access
    internet with no way of stopping it.
     
    Dag Korsnes, Jan 28, 2008
    #36
  17. Mike Dymond

    robinb Guest

    Windows Vista
    the biggest problem with firewalls is that most users do not know how to use
    them.
    The problem is not what comes in, but what goes out.
    Most regular users do not know what they should allow out and if they
    accidently do not let out a file that needs to go out, then they might find
    a program starts to not work correctly or they find they are cut off from
    the internet.
    The worse part is if they allow something that turns out to be a virus or
    trojan because they do not know what this file is or does they wind up with
    worse problems.
    The firewall software's help is made for the advanced user, not the novice
    user and most people will look at it like it is a totally different language
    and when things go wrong have no clue what to do.

    So either leave Vista's on, get a router if you want to want double
    protection just in case Vista's firewall has a blip, and you should be fine.

    robin
     
    robinb, Jan 28, 2008
    #37
  18. Mike Dymond

    Brink Guest

    LOL Dag,

    Yeah, getting things setup takes a few approval clicks. Especially
    when you have it set it Paranoid mode like me.

    Shawn


    --
    Brink

    *There are no dumb questions, just the people that do not ask them.*
    '*Vista Forums*'
    (http://www.vistax64.com/index.php?referrerid=2980)
    *Please post feedback to help others.*
     
    Brink, Jan 28, 2008
    #38
  19. I like oranges.
    IMO it is a lot better than apples.
    Comodo Firewall is a promotional tool and therefore your post could
    well be considered spam.


    Now, since the topic here is security, please explain how adding a big
    chunk of vulnerable code asking nonsense questions to your system
    could possibly increase security?
     
    Straight Talk, Jan 28, 2008
    #39
  20. Mike Dymond

    Brink Guest

    Hi Straight Talk,

    Comodo Firewall is completely free, so I do not consider this spam.

    I find that it protects my computer better than Windows Firewall
    because of all of the approval questions before it allows the action
    versus Windows Firewall not doing so.

    To each their own I suppose. There are plenty of firewall programs out
    there that are great. Some free, and some not. If you have a favorite,
    then please share with the rest of us.

    Thank you,
    Shawn


    --
    Brink

    *There are no dumb questions, just the people that do not ask them.*
    '*Vista Forums*'
    (http://www.vistax64.com/index.php?referrerid=2980)
    *Please post feedback to help others.*
     
    Brink, Jan 28, 2008
    #40
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.