firewall test result ?

XP excluded.

 

wow - what an excellent prove you showed -

 

This was hypothetical....
The point is that ZA FW does not have any other security layer to prevent malware.
You got the point?

 

I think here there is some confusion on what a firewall is supposed to do (packet filtering) as compared to an anti malware.

 

It is not the job of a firewall to prevent malware,that is the purpose of an anti-malware-antivirus product.

 

Firewall is the last line of defense when malware tries to phone home.

 

There are cutting edge firewalls that are adept at blocking some types of malware, like keyloggers, drive-by downloads, etc. It is nice to know, if you have one, that should something sneak past the AV would still have to get by it.

 

True, but most of firewalls today come with extra layers (Comodo, Private FW, OA FW....just to name few....).

 

Yes I think we're talking about the firewall/s, and not the other features and functions that may come with CIS, OA, or ZA etc...

 

Yes but if we compare firewalls on how effective they are or if they may slow down your connection, then we should compare firewalls or the firewall part of a product only.

Like Tinywall is a firewall only afaik, and so you can't compare it to the whole CIS suite with HIPS and all, but only the firewall.

 

Yes indeed that is true.However the trick is to stop malware from installing in the first place.

 

Hmmm....aiiiight then.....cool!

 

Yes we love you no problem You see we're just trying to get this right

 

sorry, but this is too simple while malware injects internet explorer running hidden commands and downloads. a pure firewall cant handle this.

 

but a firewall with + HIPS maybe can ?

 

Sure....

 

I can't agree...it's hard to imagine our work or activity in current time without network but that network is unfortunately the major vector of most of danger which we can meet. Good constructed firewall can block danger traffic to our machine, can close open ports and block spying of these not protected...its meaning in this context is basic. Everything what we reach from network and we have in disk from internet come always "outside the frewall". So we should name firewalls "the first line of defense".

 

yes, its the unfortunate confusion about what a firewall is supposed to do... mixed up with other security features (not necessarily part of a firewall but more often part of a security tool) such as HIPS, BB, Sandbox....etc.

 

Ichito, your friend borrowed you infected USB stick...

 

OK siketa...your example is good...but how often you do this and how many data you get from USB stick daily comparing with internet? Other devices (stick, cameras, mp3 player, etc.) can be still some source of infection but their meaning is today much less than the threats from the network.

 

I agree...but let's not forget about those entry gates....

 

the last time i used za on my configs was, hmmm, let me see..., hmm, oh wait, yeah, was 8 yrs ago, and it was a total resource hog. since then never tried it. it might have changed for the better though

 

I would be interested to know TinyWall tested with its default configuration together with Sandboxie having its HIPS feature turned on. The tests of course done sandboxed.

I bet the combination would score above average results on leaktests.

 

I don't get it. What HIPS feature?