Tiny Firewall or GlassWire

Discussion in 'other firewalls' started by old school, Nov 23, 2015.

  1. old school

    old school Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    26
    Location:
    Spain
    Hi friends :).

    I need advice on these two firewalls.I do not look for a firewall with HIPS. I have been using Comodo, Privatefirewall (both with HIPS) and ZoneAlarm in the past. Now I look for something simpler and have these two candidates, I can not decide for any of them, so I appreciate your advice

    I am a user of Windows 10 64 PRO. My computer is a I-5 with 8 Gb RAM

    Currently i use WSA with SecureAPlus

    I'm using Glasswire 0.1.67 beta and i'm testing TinyWall in a VM. They are two different concepts, both rely on Windows Firewall and i like both very much

    None of the two would slow down my computer, so I am looking for the best able to help protect my computer.

    Thanks in advance and have a nice day :)
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,010
    Location:
    The Netherlands
    This depends on your own taste, I can't tell you what to use. I've used TinyWall in the past and I liked it, but I still decided to switch to WFC. Glasswire looks interesting, but from what I've read it's a resource hog, and it's also a bit invasive. But let us know what you think about these apps.

    http://www.binisoft.org/wfc.php
     
    Last edited: Nov 25, 2015
  3. SnowWalker

    SnowWalker Registered Member

    Joined:
    Apr 2, 2012
    Posts:
    160
    Location:
    USA
    I know you asked only about Tiny Wall and Glasswire, but I believe Windows Firewall Notifier is also one to consider as it seems to have what you're looking for. It uses the the Windows Firewall, doesn't use resources under normal operation and is unobtrusive after it learns what connections you allow that there isn't already a Windows Firewall rule for. I haven't tried the version 2 alpha, but I've used version 1 for years and recommend it.
     
  4. haakon

    haakon Registered Member

    Joined:
    May 25, 2015
    Posts:
    749
    Location:
    SW USA
    Both use Windows Firewall, so wouldn't both offer equal protection?

    I can't vouch for GW 0.1.67; the latest version is 1.1.32.

    No longer a resource hog. Not invasive, whatever that means.

    I've been using free since March (1.0.40) on two Windows 7 systems.

    The monitoring/logging is second to none IMHO and the ability to one-click block an app is icing on the cake.

    The only snag I've run into on my Windows 10 test system is path-dependent rules are somewhat unreliable for blocking Windows' components due to new paths for updated stuff, i.e.:
    c:\program files\windowsapps\microsoft.getstarted_2.1.9.0_x64__8wekyb3d8bbwe\whatsnew.store.exe
    c:\program files\windowsapps\microsoft.getstarted_2.3.4.0_x64__8wekyb3d8bbwe\whatsnew.store.exe

    The earlier block rule would no longer be in effect and new rule for the later is needed. (This "version in the path" is ubiquitous in Windows 10 for apps and system.)
    I would think, and stand to be corrected, that would not be specific to GW, but to all Windows Firewall overlay products.
     
    Last edited: Nov 25, 2015
  5. IvoShoen

    IvoShoen Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    525
    I had troubles running either Tiny Wall or WFC on my Win 10 64 system. Things got messed up. I did have good luck with Glasswire or Windows 10 Firewall Control.
     
  6. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,010
    Location:
    The Netherlands
    I was talking about itman's comments about it using an "internal local host proxy", even though it's not even a real third party firewall. But perhaps I'm just being a bit too paranoid.
     
  7. Boblvf

    Boblvf Registered Member

    Joined:
    Aug 10, 2014
    Posts:
    103
    http://tinywall.pados.hu/

    « No cost
    100% free, no ads ... no artifical limitations, no upgrades. »

    - Tracking :

    Facebook ( 07:33:10,466 La ressource à l'adresse … connect.facebook.net ... )
    Google APIs
    Alexa
    Google services
    Google.tld
    Google.com
    Twitter.com
    Cloudfront


    - Cookies :

    Facebook tracker
    Twitter tracker
     
    Last edited: Nov 26, 2015
  8. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,183
    For readers to not get disinformed by Boblvf's post. The site http://tinywall.pados.hu/ that you get information and can download the installing file does not need scripts from facebook.net. google.com, stumbleupon.com, twitter.com, alexa.com allowed to work, it does not need infact any 3rd party stuff allowed. In the download link http://tinywall.pados.hu/download.php there is additionally an image from paypal.com, related to donating option.

    I am quite sure that you won't get any tracking from TinyWall install itself. Sure clean the browser cache etc., as with after visiting many other sites too.

    EDIT:
    And the 3rd party cookies, you won't notice them as I did not, when you have them blocked with the browser setting, well maybe uMatrix option "Delete blocked cookies" had to do in that too. You can always see in the browser icon if you have some cookies blocked, in case you need to allow them.

    Anyways those things Boblvf posted are just social media buttons ultim wanted to add to his TinyWall site.

    EDIT2:
    When we talk about 3rd party firewalls (controllers included) it has always been understood by me that we expect some control to blocking unknown outbound connections. I have not much knowledge of the free version of GlassWire, but if it does allow only blocking known outbound connections, then is not a firewall in my opinion. Just a front end to Windows firewall with the same default settings. Might have some nice other options and then sure easier to operate than a true default deny outbound controlling firewall.
     
    Last edited: Nov 26, 2015
  9. Boblvf

    Boblvf Registered Member

    Joined:
    Aug 10, 2014
    Posts:
    103
  10. haakon

    haakon Registered Member

    Joined:
    May 25, 2015
    Posts:
    749
    Location:
    SW USA
    The understandings and expectations you cite and your "true default deny outbound controlling firewall" category are inclusively tangled.

    Free Glasswire will alert to first time outbounds. One can then open GW and under the Firewall tab choose to block the subject process if that is the desired strategy. Licensed GW will present a popup presenting allow/block intervention.

    GW rules in Windows Firewall with Advance Security are named in this convention...
    @{Glasswire.application_12681296036157597303}
    ...and can be examined/modified in Properties like any other rule.

    Windows Firewall remains Windows Firewall in every respect. If Glasswire "is not a firewall in my opinion" then neither is Windows Firewall with Advance Security. In that respect, you'd need to disable Windows Firewall and use the true default deny outbound controlling firewall that meets your requirements.
     
    Last edited: Nov 26, 2015
  11. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,183
    Your post is most confusing and I doubt if anyone with even perfect understanding of english language without firsthand knowledge of GW could understand you exactly.

    I try to ask from you in a more explicit way:

    1. Does free GW block unknown outbound connections that programs from your computer try to do? That means the same as if it is in default deny mode to outbound connections. If the answer is no, then I am afraid I have to say it is not a firewall (controller).

    I never use such geek terms as Windows firewall with advanced security. We should not use such terminology if there is the slightest chance that our readers might get wrong ideas in their head. The windows firewall yes is a firewall even in default mode. And yes it can also block outgoing connections, even the mode can be changed to default deny outbounds.

    It is not practicable to run Windows firewall in default deny outbound mode without a controller and a program that ables us do that I call a firewall. A program that can just disable known executables connecting to internet using Windows firewall in default mode is just a controller. It is not a firewall at all. There is a big difference. Such program can of course be useful in it's own right, but a firewall it is not.

    The firewall engine, filtering platform, what ever we like to call it, is to these controllers Windows firewall (that has them advanced options lol) of course. But to make things not too complicated we can call such programs abling us that control of unknown outbound connections firewalls too.

    There are many more things that should be known, but most likely are best left to users of GW. But for instance consider this: http://www.saunalahti.fi/~jarmos3/TinyWall_rules_215.jpg
    Those are the only connections allowed by TinyWall in normal default deny mode. All other connections must be explicitly allowed by the user. When one goes using default deny mode (both outbound/inbound) there is good reason to delete the default windows firewall rules. If GW is a default deny firewall, one would of course be interested to know how it handles them.
     
  12. old school

    old school Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    26
    Location:
    Spain
    Firstly, thank you all for your replies. Please, sorry for the delay to answer you, I have had problems with the supply of internet these days

    @Rasheed187 Thanks for your advice. Tinywall is more "discreet". Glasswire it seems that itneeds to call the attention and remind you that it is the handsome, Tinywall is in a discreet background. They are two totally different presentations. I like both, with really Tinywall you forget that it is there, not with Glasswire,
    i thought seriously about WFC, but the free version, it's only my opinion, does not improve the performance of the previous

    @SnowWalker Thanks for your advice. It seems an excellent choice. The only thing i might not have liked is that it is a Alpha version since July. I will look for when they release the final version, because it is the type of firewall that desire in my computer

    @haakon Thank you for sharing your experience. I really like the GUI of GW and how you say it is very comfortable. Between the two candidates that i have submitted, aesthetically one seems 10 years ago and the other that has just come from the future.

    @IvoShoen Thank you for sharing your experience. It is important for me to have this information. What kind of trouble you caused TinyWall or WFC? It would be good for me to know that because of the 3 derived from the firewall of W10, 2 gave you problems, and that speaks well for GW

    @Boblvf Thanks for the info. Use EditThisCookie Ghostery and, in many pages use cookies to "accompany" our downloads, fortunately we avoid comfortably with extensions.

    upload_2015-11-28_18-15-27.png

    @Jarmo P Thanks for the info. Yes, it seems that it is the Windows Firewall but much easier and beautiful. Don´t needed previous knowledge to configure it , the learning curve is 0. Thanks for the link "allowed" of TinyWall.

    I enjoyed reading / learning from all of you.
    Thanks again to all of you and now with the internet restored, I decided install TinyWall.I take this opportunity to apologize again for taking so long to answer you.

    It is more difficult to use, certainly not as comfortable as other firewalls I have used. What I liked most is seeing how absolutely denies any option to connect any program. I explain. I'm using Paragon and it did not send me the email notifications. , but I'll be very aware of GW. It is as nice as easy to use

    Thanks to all and have a nice day
     
  13. haakon

    haakon Registered Member

    Joined:
    May 25, 2015
    Posts:
    749
    Location:
    SW USA
    WFWAS.jpg
    That's Windows 7. Off the top of my head, I think it's still geeked with the same name in 8 and 10.

    (In Windows 7, opening "Advanced settings" in the Windows Firewall Control Panel will access the Windows Firewall with Advanced Security console if one hasn't tweaked the Start Menu Properties accordingly.)

    I don't have the time or energy to engage in any further discussion in this thread, but as a geek I can offer this conclusion: Glasswire is Not For You. Good luck.
     
    Last edited: Nov 28, 2015
  14. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,183
    You must understand that I was not trying to put down Glasswire. It might have good uses as mentioned. I had to post what I did to show the difference that I think do exist and you did not answer my simple question. You even posted this to just keep things confusing:
    It is true that both use Windows firewall and are thus controllers of it. I must again point out that not all controllers are firewalls. I think another such firewall besides TinyWall is Binisoft's one.
    There exist other firewalls for Windows that are not controllers. They disable the Windows firewall instead changing it's mode. And use only the Windows programming platform API.

    The advantage of using the Windows firewall is it is using very low CPU usage. Then again we must consider what decisions Karoly Pados did in keeping TW also on low CPU usage. I doubt if GW can do the same low usage of resources with it's extensive logging recordings.
     
  15. IvoShoen

    IvoShoen Registered Member

    Joined:
    Jan 2, 2008
    Posts:
    525
    I had problems with Tiny Firewall blocking certain processes that I had to hunt down and unblock them. It also gave me a hard time with LAN access. WFC was quite good most of the time but the main problem with it was that it would not start up on some boots and manually starting it would not work. Only a reboot would sometimes bring it back. GW is fine, but I have moved on to Windows 10 Firewall Control which is much more flexible and uses a lot less memory and cpu than the others.
     
  16. SnowWalker

    SnowWalker Registered Member

    Joined:
    Apr 2, 2012
    Posts:
    160
    Location:
    USA
    No Problem. But that's why I specified that I use version 1
    Which is available on the download site below the alpha version: http://wfn.codeplex.com/releases

    Though I do find it curious that even version 1 still shows beta on that link.
     
  17. old school

    old school Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    26
    Location:
    Spain
    @Jarmo P Thanks for the info, I'm looking for a controller, rather than a standalone firewall,

    @IvoShoen That was a great candidate, no doubt, in fact I tried it a couple of years ago, but uninstalled it. I do not clearly remember the reason, surely install in my VM to see if I'm comfortable with it now

    @SnowWalker Thanks for your answer. Yes I saw they have a beta and alpha versions.
    It seems very interesting and if it were English-speaking undoubtedly prove it, but it has not version in my language (spanish), and as you see, without a translator I am lost.
    I'm afraid to create rules without fully understanding what I'm doing

    Thank you all for your responses. Have a nice day :)
     
  18. Windows_Security

    Windows_Security Registered Member

    Joined:
    Mar 2, 2013
    Posts:
    3,060
    Location:
    Netherlands
    Why don't you use the build-in firewall of WSA. Just tell it to prompt for any untrused process (one level higher as default) or to ask for any process going outbound (two levels higher as the default)? The prompt for untrusted processes works really well, when you set the allowed programs to only allow execution of programs seen in the WSA cloud (and have been whitelisted as safe). With normal usage you won't be bombarded with pop-ups, WSA stays quiet.

    Have not been using WSA since pre-beta, but I m sure Tripple Helix (forum member) will help you find those settings in WSA
     
  19. old school

    old school Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    26
    Location:
    Spain
    @Windows_Security Thanks for your reply. WSA does not include firewall settings in "Advanced Settings". Yes, I can block / allow files in "PC Security", I find very little information I get from this function of the firewall, so I prefer a more specialized tool. I've seen screenshots containing those advanced options, but my antivirus does not show me this option. Thanks again

    upload_2015-11-29_10-8-51.png upload_2015-11-29_10-14-22.png
     
  20. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,010
    Location:
    The Netherlands
    I have to admit, because of WFC, I now get a bit annoyed with alerts about outbound network access, I now prefer auto blocking it. Of course when you do need to give some app access, it can sometimes be a bit tricky. I believe TinyWall does the same. About Glasswire, you should read some of the comments in the GW thread, according to itman, it has full control over your network connections, so you should trust it 100%, if you don't, it's better not to use it.
     
  21. old school

    old school Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    26
    Location:
    Spain
    Thanks :) . Very good point. I'll read it carefully.
     
Loading...