Which one would you use?

If you had a Router Firewall, and could only use either a Third Party Firewall or a HIPS along with your favorite Antivirus for additional protection. Which one would you use?
I like the idea of having a software like SSM Free or Cyberhawk along side of my AVG AV, but in the same token I also like something with the additional protection that Comodo Pro, or even the free verson of Sunbelt Kerio Firewall gives. I believe the paid version of SSM and both versions of Prosecurity offer some outbound protection and that using them may be fine. However I'm thinking that maybe a Firewall with additional protection like NIPS and Application Behavior Blocking may be the over all best solution for security along with an Antivirus, since not everyone likes using HIPS.

 

AV + firewall + sandbox for me
If you like, add an execution interceptor like PG free.

 

id go with Comodo or Prevx1. cant rele decide.

 

I, at times, have used jetico 1.0 with the inbound protection disabled (C: /windows/system32/ drivers/bc_filter). At the moment, I am using DSA as my compliment to my router/firewall. All seems well. I do, however, have powershadow 2.6. How is everybody?

 

I think I understand that having a Software Firewall with our AntiVirus may be more important to use together even behind a router firewall, as I guess it covers the everyday malware, (Trojans for example) while a HIPS software basically sits their and waits for unknown or 0 day malware. Anyone agree? Also being on a wireless PC and my wife hardwired into the Router, I'm told she could possibly pass something along over our network to my PC that she downloaded from some site. (No Porn that i know of though. LOL) So although a HIPS may detect this, a Software Firewall would detect something trying to connect out that may have bypassed the HIPS, right?

 

personally i just use my dr.web behind a router firewall, no hips, no other spyware component, and it keeps me very safe, i have all the trust in it

however, to answer your thread ... HIPS just isnt needed, hope that helps, so the only question left is, do you want a 'software firewall' yes/no?

end of,

 

today i thought i would add the windows updates to my old PC with windows ME on it.
all i had installed for security was drweb and jetico firewall.
also behind nat router.
i didnt really need jetico but oh well
i felt safe enough with just drweb and jetico
lodore

 

Today I removed NOD32 from my primary desktop, the license is about to expire and I have decided not to renew NOD32, instead I moved my AVG Anti-Malware license from my secondary box to my primary desktop. I like AVG and use nothing else except the XP firewall and AVG Anti-Malware for protection. I have never had a need for other third party applications besides a firewall and antivirus program. Your mileage may vary depending on internet use and surfing habits.

 

A light on resources and effective set up imho for surf wise users.

 

Lately I've been kind of like you, Duke, switching back and forth. But, after trying all the different firewalls, I keep coming back to Kerio, as the Kerio rules make sense to me. I tried Comodo, and liked it somewhat, but there were some security issues with it that bugged me. Don't know whether they were real or not, but just made me nervous. I tried the PC Tools firewall, but I had used Kerio 2.1.5 for so long that the rules in PC Tools just didn't click with me. I also didn't like the fact that you had to allow inbound connections. I wanted to go back to Kerio 2.1.5, but the situation with fragmented packets, etc, made me hesitate. However, I was at another site and read an article about how to turn Kerio 4.x into 2.1.5, basically (rule-based firewall). And so, I disabled the applications checking and the predefined network security and created the same ruleset in the packet filter that I used in 2.1.5. I also downloaded the 4.2.2 version, which is the last official Kerio version before Sunbelt took it over and before it became such a resource hog. For me, this is the best, as I can tweak it as tight as I want, and place my application data in the packet filter. There are plenty of good resources and already-created rulesets that you can use to help create your own rules. So I use the 4.2.2 (as a 2.1.5 type packet filter) along with KAV. However, I also run SSM mainly for app termination protection. Of course, I've always used Winpatrol in the background to keep an eye on things. Kind of a long, drawn out answer but hopefully something you can chew on a bit.

 

Prevx1,hands down.

 

Duke, even though you have a hard firewall (router) at home, you still should have outbound filtering, which can be in the form of FW or HIPS. If you use a laptop however, you definitely need a good software FW for the times you are at hotspots!

 

NOD32 + OA 2 beta

 

I have just decided to continue on with the Avira suite. Secure and not a drain on resources.

 

Try Cyberhawk if Prevx1 is to much of a resource hog for you.

 

What works for me is moving the "My Documents" to another Partition or onboard drive and using ShadowSurfer for drive C along with Kerio 2.15. I have protection against any malware trying to access my files and sending them out (kerio); any viruses (because they usually need a reboot); and any tracking cookies, spyware, etc. (ShadowSurfer) All in all, my memory usage is under 6k for the ShadowSurfer and under 5k for Kerio. I am very happy with this setup.