Do I really need a third-party firewall?

Its been a while I am out this forum... I was using Linux for about 2 years, but I decided to return to windows, this time with Vista Home Premium.

I want to have a basic set of security programs...

I have now Avira Antivir Premium as my antivirus, SAS Free as a antispyware, and use Firefox + NoScript as my web browser. Also use Windows Vista firewall.

I did a quick test on pc flank, the result is Warnig, Warning and Danger.

My question is: do I really need to use a third-party firewall instead of Vista´s firewall to have a decent security? In the early days I used to use Outpost Firewall, is it still recommended?

Sorry my bad englsh.

 

Hello,

I think the Vista firewall will provide decent security. I suggest, however, that you use a more robust one such as the free Comodo Firewall Pro or Outpost Firewall Pro. Both are excellent solutions.

 

Thank you for your opinion...

I forget to say that I do not have a NAT router. I use an adsl modem.

 

Firewalls such as Comodo Firewall Pro 3, Online Armor, etc provide HIPS and do more then a Firewall does, The HIPS will help block malware attacks & this is a very useful feature (For example, I am no longer using an AV Because CFP 3 with Defense+ asks for every thing I run, and thats how I like it), I have the ability to control everything on my PC.

So Firewalls these days are good IMO Not saying don't use an AV!

 

You're very welcome.

BTW, just in case you don't know, CFP 3.0 has a HIPS that is excellent at blocking malware. Or if you really want to use Vista's firewall, you can get DefenseWall HIPS. IMHO, it is a really powerful security software that should keep your computer from getting infected.

I assume that you're a fairly technical user, having used Linux for 2 years. With that in mind, I think that the Vista firewall will suffice for your everyday needs, provided that you configure it properly.

EDIT: 3xist got ahead of me

 

The answer to your question depends on your personal www risk profile.

Do you do on line banking or purchases on credit?

Is you home ISp in a dangerous part of the world?

Do you have a clean image of your c drive?

Is your data on a separate partition? and backed up daily?

You say you got flank test warnings? What are the details? what warnings?

You have solid AV and ASW as well as a soild browser plus windows vista FW. I suspect all you need to do is turn on the two way feature on vista FW get behind a router an carry on.

But if you surf the dark side and do $ stuff then go for a solid two way 3rd two way party FW and a good hips.

Sorry to hit you with questions but otherwise advice is blind.

 

Do you do on line banking or purchases on credit?

Yes

Is you home ISp in a dangerous part of the world?

Don´t know... Well, I live in Brazil.

Do you have a clean image of your c drive?

No.

Is your data on a separate partition? and backed up daily?

No.

You say you got flank test warnings? What are the details? what warnings?

The test found visible port(s) on mysystem: 135. Also it says that while visiting web sites my browser reveals private information about me and my computer. It sends information about previous sites I have visited.

Thanks for the replies... I am evaluating Outpost PRO 2009, nice and easy firewall...

 

Since you do online banking, I would strongly suggest that you use a strong, two-way firewall. Outpost Firewall Pro 2009 is an excellent choice for that. Also, I strongly suggest that you create a clean image of your C Drive, and perform backups regularly. You never know when bad things can happen (e.g. hard drive failure, system thrashed because of a critical mistake).

 

I'm sorry I can't comment on Outpost Pro 2009 but I can tell you that in Online Armor and for that matter with Kerio I have port 135 restricted.

As to site information I use a setting of zero history and run daily cleanups of all items like that. CCleaner does a resonable job of that.

You should maximize the security on any browsers.

ambient 88 has given you advice on the other matters and is correct. Strong passwords changed frequently is important as well!

 

Thanks for the replies!

But I have another question: with outpost fw, pc flank test says that I have ports 23 and 3128 visible. But the same ports are stealth according to ShieldsUP! test. Any problem with PC flank test results?

 

The OP has vista,OA has no vista version yet.
You can try comodo pro free http://www.comodo.com
you can try Look n stop Not free.http://www.looknstop.com

 

I would only feel comfortable without a software firewall if I were always behind a router that I had configured myself.

The Windows Vista Firewall does a fair job. I like having more control over outbound connections that it readily provides.

 

Hi djohn:

Yes, in the OA world, the vista version is in beta testing stage. No, I don't know when it will be released.

 

Have a look at the leak tests that are widely available.

 

Thanks looking forward to the release I hope its a good one.

 

A firewall with good inbound protection (make sure it knows how to deal with networks, or wireless connections) and basic outbound protection is good enough in my opinion.

I don't think a 'leaktest-proof' firewall is very useful.

I suppose HIPS is an option, but you could easily do without if you manage to get a proper security setup. Especially updating your OS, software, browser, configuring your browser properly and configuring your security software correctly will go a long way.

If you really have malware on your system, would you want to rely on perfect outbound protection, which is probably impossible to get ? Those fancy firewalls withs HIPS and 'leaktest-proof' features tend to be complicated or have other issues.