Windows 7 Firewall Control Plus

I don't understand one thing :
If Windows7 firewall is ON and Outbound is blocked , then WinControl doesn't matter, everything for Outbound will be blocked.
Is that right ?

So, WinControl is useful only if Win7 firewall is turned OFF ?

 

Win7 Firewall Control is a different Software than Windows (built-in) Firewall,
but both use WFP -> http://www.microsoft.com/whdc/device/network/WFP.mspx
use only one!

 

You can use both at the same time. I used Win7Control's info for setting up Win 7's outbound. I have since disabled Win 7's firewall and now allow Win7Control to do the monitoring for me. But to answer your question, yes, Win 7's firewall outbound rules if enabled will overide Win7FirewallControl Plus. If you are using Win7FirewallControl Plus and have a rule in it for a certain app which allows outbound whilst also having Win 7's outbound firewall enabled and do not have a rule in it for that app, then Win 7's outbound will block it.

 

Right now I'm testing it (free version) with Win7 firewall ON.
Default for outbound was Allow so then I've noticed this.
However, because I can't 'fine tune' free version (for example to allow inbound for utorrent only for one port)I did that in Win7 firewall.
Now, if I turn Win7 firewall OFF , then this free version is no good to me, and there are pretty good free firewalls outhere.

But I think I'll use Win7's firewall and remove this WinFirewallControl.
It's pretty good, yes there is no pop-up for outbound , but I can live with that.

 

Why are you trying the free version? Use the Full version for the 15 day trial

 

Just did that and I don't like it at all.
Setting up rules is confusing and I find it buggy, also I didn't saw that entering port range can be done.
I create zone , but I can't add that zone to some app
Interface is very ugly btw.

Anyhow, that win7control saga is definitely over for me, based on some information from here (tnx to Brummelchen) I learned that MalwareDefender is using the same framework, so I've tried it (disabled everything else, I'm just interested in Network part) and it's far far more better than Win7Control , like it very much
I'll try it for 30 days and then decide should I stick with it or just going to use Win7's firewall.

 

MD is for 32bit only - and going somehow freeware since coming up 2.7 next time.

PC Tools Firewall is for 342 & 64 bit - but it has no hips.
http://www.pctools.com/firewall/
(hips is not really important)

 

PC Tools FW has a HIPS, what is your support specialisme I wonder?


PS the logo of MD has changes, so you should update your Avatar

 

Brummelchen,

I can't follow you either. You have MD logo in your avatar and telling HIPS is not really important. Do you only use MD's firewall capabilities?

Regards Kees

 

i sort new apps into classes with pre-given rules (as subset recommended).*
i use hips for present programs to supress some behavior i dont want to,
eg opening i-explorer windows i normally close very fast. but major use
is idd the firewall.
* any other way would become annoying with popups
may not correct but from me to others the learning mode wont be stoppable otherwise

i tried W7fc last weeks more or less but anytime i had MD parallel running due
those mentioned behavior - i can not really without md.

 

I plan to use both. Here's one reason why:

I've done some port tests at https://www.grc.com/x/ne.dll?bh0bkyd2 using Windows 7 Firewall Control v3.5.1.131 x64 free version on Windows 7 x64. First, I temporarily set my router to pass through all traffic to the computer I am using, so that the router isn't interfering with the tests. When I run the common ports test with the built-in firewall disabled and Windows 7 Firewall Control in normal mode, most ports are closed but not stealthed. However, when I run the common ports test with the built-in firewall enabled and Windows 7 Firewall Control in normal mode, all ports are stealthed. If you're always behind a router that stealths ports, these results may not matter to you.

 

drop this bad idea!
it never was a good idea to use 2 firewalls.
and if you plan to use the w7fc free version only - drop it completely.
free version only can permit/deny only -> http://www.sphinx-soft.com/Vista/order.html

the windows 7 firewall is a bit complicated to use but it offers the features
from w7fc pro!

BTW PC Tools Firewall has NO hips - only "Enhanced Security Verification"
http://www.pctools.com/forum/showthread.php?t=62898
http://www.pctools.com/forum/showthread.php?t=65774
it checks the signature of files

read more here
http://www.pctools.com/forum/forumdisplay.php?f=30

the official description writes also nothing about hips
http://www.pctools.com/firewall/

 

W7fwc is just an interface for the inbuilt Win7 fw. It's not a separate fw.

 

dont mix terms pls - w7fc and wf uses the WFP (Windows Filtering Platform).
But the have separated settings. WFP was introduced with Vista - a limited
WFP (limited = less tcpip support) came with sp2 on winxp.

 

Here are some quotes from their forum from a person that I assume is the author of Windows 7 Firewall Control:

Here's how I mentally model this: with the addition of Windows 7 Firewall Control, there are now two rulesets, both enforced by Windows Filtering Platform. In order for a given packet to be allowed to pass, it must be allowed to pass by both rulesets. Basically then, by keeping the built-in firewall enabled, you get all of the protection offered by the built-in firewall, plus the additional outbound protection provided by Windows 7 Firewall Control. If this is technically incorrect, somebody please correct me.

Regarding the "free version only can permit/deny only" comment: that's actually exactly what I'm looking for . I'm aware that such a setup will not do well in leaktests. The doctor says that I have a bad case of Promptitis .

 

It should also be noted that the Windows 7 Firewall Control Free installer doesn't turn off the built-in firewall, unlike the other firewalls that I tested. I would think that the installer would turn off the built-in firewall if there are issues with both firewalls being active.

 

If in fact W7FCP is just another "control panel" for the built in Windows FW its redundant in Win Vista and Win 7 as the built in FW offers inbound and outbound which W7FCP claims to add as well.

 

I want the outbound prompts though.

The program author does address this:

 

i confirm that (wrote nothing else above)

first answer (start) points out the differences between pro/free, but
not the differences between pro <> built-in

same - pro vs built-in.

but the w7fc FREE is definitely the inferior choice to the windows firewall.
same conclusion at the end of linked thread:

author is always talking about PLUS - ofc he wants to sell

anyway - for 32bit i prefer (the now FREE) Malware Defender. it has firewall
based on WFP and a nice hips. for 64 bit w7fc pro would be my first choice
beside LookNstop firewall (both paid).

 

I sent them a email about turning windows firewall off or keeping it on when I trying out Sphinx Vista Firewall Control (I'm assuming same rules applies to their newer W7 control) and they told me:

"The both products work entirely independently. VistaFirewallControl uses the Built-in Firewall only once, at the first start to grab the initial settings. Due to complete product independence you can switch the Built-in Firewall ON or OFF at your option. "

 

There doesn't have to be a choice though. One can use both, as the email shown by country2 attests to . As I stated before, the built-in firewall does not have prompts for outgoing access. If anyone disputes this, then please show me a screenshot of the built-in firewall prompting for outbound access.

 

before you answer again - read this and TFM of Windows Firewall
http://www.edbott.com/weblog/?p=1219
and you should configure it thru MMC - not the dialog...
ofc there is only the option to alert incoming request - but outbound are disabled by default - should be! so you have to grant access manually as a rule.

hth

 

I was fan of Windows 7 firewall , but had to stop using it because I've noticed some apps are inserting their rules in it (Inbound)without any alert, and I wasn't able to prevent it or find anything on that subject.

 

Then it's not set up right. No way in the world can apps insert themselves into the ruleset if the defaults are set to normally block for the given "Active" profile. Actually, "Block" should be already set by default for inbound, so I'm not sure why that's happening to you??

 

Ah you lost me here. The pics shown at the site are no different than what one gets by going thru the usual hoops of getting to advanced firewall settings. Whether it be mmc, start menu search "firewall" and choosing firewall which can eventually take you to "advanced settings" or start menu search "windows firewall with advanced security", it's all the same. The properties of the links prove that.