PDA

View Full Version : DSA/Windows Firewall or Comodo FP ?


Ocky
August 17th, 2007, 05:41 AM
I seem to recall some posts mentioning that DSA (FW & HIPS) plus the
Windows Firewall (XP) would be a good alternative to CFP and other
dedicated firewalls. I am currently running NOD32, CFP, AVG AS - all
real-time and browse with Opera 9.23.

1. Any comments on going the DSA/Windows FW route, and would this
combo use less resources than my current setup ?

2. I presume the firewall loopback issues when using a proxy (Proxomitron)
won't apply as far as inbound protection provided by Windows FW is
concerned - but what about outbound connections when DSA comes into
play ?

3. I have Security Center disabled, but as a matter of interest, which firewall
would be recognised ?

4. Any known conflicts with NOD32 ( using DSA ) ?

Thank you in advance for any ideas/inputs.

Regards.

Drew99GT
August 17th, 2007, 01:36 PM
DSA does everything the windows XP firewall does and more, so running both would be redundant.

ccsito
August 17th, 2007, 06:17 PM
{QUOTE-> DSA does everything the windows XP firewall does and more, so running both would be redundant. <-QUOTE}

I recalled that DSA complemented your existing firewall program instead of replacing it. I don't think it does any data packet filtering. From the documentation it looks to be a system monitor and not necessarily data communications software.

http://www.wilderssecurity.com/showthread.php?t=161400

farmerlee
August 18th, 2007, 06:32 AM
Its my understanding that DSA is basically private firewall without the advanced options. If i remember correctly there was an in depth thread about it and the developer explained a lot.

Ocky
August 18th, 2007, 09:16 AM
I would primarily want DSA for its HIPS capabilities, leaving the firewall
stuff to either Windows XP FW or CFP. (If CFP then I suppose it would be wise to turn off the App. Behaviour Analysis to avoid conflicts).

Maybe I will stick with what I have (I'm happy with it), due to a post
where it was mentioned that if allowing an application in DSA, the whole caboodle will be allowed to connect (and vice versa).
This is of course not ideal. With CFP I can block say the update service
of an app. without blocking the entire application.

Regards. :-\

benny bronx
August 18th, 2007, 10:30 AM
{QUOTE-> if i remember correctly there was an in depth thread about it and the developer explained a lot. <-QUOTE}

The link posted by ccsito. The product manager of privacyware stated:

{QUOTE-> While DSA has 4 visible modules in its interface (System Anomaly, Email Anomaly, Process Detection, and Application Security), it also contains Privatefirewall's proprietary layer-3 firewall using stateful packet inspection technology running in the background. <-QUOTE}