Vista Firewall Control, Waste of Time?

Is using the FREE version Vista Firewall Control by Sphinx a waste of time?

It says on their website that the free version doesn't support System/Core application protection. To get System/Core application protection I need to buy the PLUS version.

So if the free version doesn't support System/Core application protection does that mean it's a waste of time installing, because the main threats like keyloggers, rootkits etc would be damaging on the System/Core application level.

Is that right?

And I am running Threatfire which asks me to give permission to everything wanting out access. Doesn't Threatfire do the same job that the free version of Vista Firewall Control by Sphinx would do?

But what's interesting is that Threatfire doesn't seem to detect all outgoing data. For example when I load Kompozer, firewalls detects it trying to access a server, yet Threatfire doesn't pick it up. Any ideas anyone?

 

I wonder if it allows outgoing access to any program running from windows/*, or just MS system programs.

I'm still not sure how it interacts with the Windows Firewall. They both use the WFP, but if you have a program set to block in Windows Firewall and allow in VFC, which overrides?

 

I am sorry I did not understand your question.

 

VFC allows system/core applications in c:\Windows\* to connect out unimpeded. Does VFC allow everything running in c:\Windows to connect out or does it check the signature and allow only Microsoft signed programs only?

 

The whole point of ThreatFire is smart behavioural blocking with very few alerts and minimal amount of false positives. So it won't prompt you for every program that connects, it'll monitor their behaviour and if it does other suspicious stuff it'll alert you.

 

No idea

 

Ok gotcha, thanks.