Free Firewall for Windows 7


Recommended Posts

Using the built in Windows firewall these days, used to use Zone Alarm but it's just so intrusive have use Comodo but again intrusive and broken.

Never had any problems with the integrated one, works well, does as it says and it's always good not to have to install a third party option!

Link to comment
Share on other sites

You cannot compare the Windows firewall with products like Zone Alarm or Comodo. The latter are 'full options' products and offer far more features.

The 64K question though is whether you need a full options package to protect yourself. If you're behind a cable modem with all ports opened and no NAT or anything, you defintely need a full options product. But if you're behind a firewalled and NATted router Windows Firewall will be sufficient.

Link to comment
Share on other sites

The value of a s/w firewall is not just controlling outbound connections, but controlling other app behavior. Both Comodo and KIS can block registry access. Apps like the Macrovision Flexnet Licensing Service that installs with Adobe apps write all over the registry when they run, dozens of keys. I use Comodo to block that on my XP rig.

Apparently the new Comodo 3.9 works OK on W7, without using compatibility mode, but I haven't tried it yet.

Link to comment
Share on other sites

Yeah the Flexnet Licensing is one of the culprit and I haven't installed Adobe crap on my W7 machine yet!

OT: One interesting thing I discovered about W7 vs XP is that if you disable the FlexNet service it stays disabled. On XP, Acrobat will reenable and start FlexNet even if it's disabled. A benefit of UAC, no doubt. Of course, when Acrobat notices Flexnet isn't running, it shuts down. When I get around to it I'll set up Comodo to sandbox Flexnet. That worked well on XP.

Link to comment
Share on other sites

The Flexnet is a treaky basta*d. I have even tried to uninstall the service and delete all the dlls for it. Adobe keeps recreating it and that is why I gave up on mucking around it and had all the internet access to it blocked.

Link to comment
Share on other sites

The Flexnet is a treaky basta*d. I have even tried to uninstall the service and delete all the dlls for it. Adobe keeps recreating it and that is why I gave up on mucking around it and had all the internet access to it blocked.

That happens because the Flexnet licensing service is also a part of the main Adobe binaries. If the files required for the service are corrupted or missing, the main applications when run re-create them.

Link to comment
Share on other sites

various software makers are offering free beta versions of antivirus and firewalls.

mcafee (free until 31 dec 2009)

kapersky (free until nov 31 2009

norton (however times out ever 14 days)

Link to comment
Share on other sites

various software makers are offering free beta versions of antivirus and firewalls.

mcafee (free until 31 dec 2009)

kapersky (free until nov 31 2009

norton (however times out ever 14 days)

Avast Home (free permanently; requires only registration)

Avast Professional (thirty-day trialware)

Microsoft Security Essentials (starts June 23rd with public beta)

A basic firewall is still included with Windows Vista and 7 (as it has been with XP since Service Pack 2); I know of no reason in terms of security to replace it. (In fact, neither Avast or Kapersky replace the Windows firewall in their non-Professional suites.) One thing I would be aware of is how well the replacement firewalls stack up compared to the basic Windows firewall. (Any firewall that is no better than the firewall it replaces should raise an alarm; if it's worse, the product should be black-flagged.)

Link to comment
Share on other sites

It only provides marginally better protection than a piece of cardboard :x

No, not even *remotely* close :no:

Just look at this firewall test. Comodo and Outpost 2009 are doing great, especially considering they're free. Also notice that ZoneAlarm Free fares pretty bad.

Then scroll down to the very bottom (where it says "62 tests") to find OneCare as one of the worst :x It's the very same firewall as included in Vista nd Win7, just a little prettified and packaged so it's also able to run on XP.

http://www.matousec.com/projects/proactive...nge/results.php

Of course, a hardware firewall will still be your best bet.

They're not the same. OneCare's firewall replaced the Windows one, and the Vista/7 firewall is not the same as the XP SP2 one.

I just tested the ones the site said failed:

Breakout2: Passed

ECHOtest: Passed

Kill1/Kill2: Passed

TooLeaky: Passed

Wallbreaker1-4: Site is offline, cannot test.

Windows 7 RC build 7100 using integrated firewall and Defender.

Link to comment
Share on other sites

Windows firewall is fine and will work, if you dont trust the network, then DONT GET ON IT. as well as keep the box fully patched, patched alone will solve alot of your problems

Link to comment
Share on other sites

I have been using ZoneAlarm Free Firewall with XP and Vista and stuff but I can't install that on Windows 7 yet. Is there any alternative to it which is free and good firewall. I would really like to find out as my sister is crying out loud to get the Windows 7 on her laptop after seeing that my brother and I have been using it. But I seriously don't trust her to use it without a firewall.

Cheers :)

And what is wrong with the Windows firewall?

Link to comment
Share on other sites

Windows Firewall + your Routers firewall is all you need. Anything more is overkill/a waste of money.

+1 ...... Agree

I'm using:

Windows Vista Firewall + NOD32 .... Never had a virus...ever.

Link to comment
Share on other sites

Ok I had a quick look at the Windows Firewall with Advanced Security, I must say it's much better than the firewall in XP. I will give it a crack and see how it stands.

Apologies for asking a question assuming Windows Firewall sux. I come from XP where Windows Firewall is a joke!

If you are referring to pre-SP2, then you have a point. However, with Service Pack 2, the built-in firewall stopped being a joke and could actually be taken seriously (much to the consternation of most competing operating systems). Windows has never been able (unlike UNIX, Linux distributions, the BSDs, or even MacOS) to use STO (Security Through Obscurity) as any sort of defense, simply because, with over half the world's desktops using Windows, it's way too obviously a target. Having a bulls-eye on your noggin forces you to armor up.

Link to comment
Share on other sites

If you are referring to pre-SP2, then you have a point. However, with Service Pack 2, the built-in firewall stopped being a joke and could actually be taken seriously (much to the consternation of most competing operating systems). Windows has never been able (unlike UNIX, Linux distributions, the BSDs, or even MacOS) to use STO (Security Through Obscurity) as any sort of defense, simply because, with over half the world's desktops using Windows, it's way too obviously a target. Having a bulls-eye on your noggin forces you to armor up.

I think that you mean STMS. :p

With closed, secret source code, Windows would be considered your STO example. BSD/Linux have their sources for all to review, so aren't "obscuring" anything. They just lack the desktop marketshare* that makes tempting targets.

* Now, server marketshare is another matter, as BSD and Linux are quite abundant in that area.

Link to comment
Share on other sites

comodo works fine and is the best IMO.

if it's "so safe" then why do people "still" run windows firewall or comodo in combo with them then? the point is there is nothing wrong with a software firewall, a good one i mean. some people don't have the $$ for a router or switch, unless you feel generous enough to buy us all one! ;)

I stopped using firewalls back with win98 and as many "untrustworthy" sites Iv been to, Iv never once had a problem.

Link to comment
Share on other sites

I think that you mean STMS. :p

With closed, secret source code, Windows would be considered your STO example. BSD/Linux have their sources for all to review, so aren't "obscuring" anything. They just lack the desktop marketshare* that makes tempting targets.

* Now, server marketshare is another matter, as BSD and Linux are quite abundant in that area.

It's the lack of desktop marketshare that I meant when I was referring to obscurity.

While Linux, the BSDs, and UNIX aren't exactly obscure, their marketshare is in the server closet, not the desktop. If you wanted to attack as many desktops (not servers) as possible (for fame (or infamy)), what operating system would be the most tempting target; the operating system with the largest desktop marketshare, or one of those with but single digits?

Do Linux distributions have vulnerabilities? They certainly do; so does UNIX and the BSDs. However, what buzz, if any, does anyone get when they whack a desktop Linux distribution (even Fedora or Mandriva)?

Nearly one HUNDRED security vulnerabilities have been discovered (and patched) in 'buntu 9.04 alone since launch. How many of those are even close to being public knowledge (by that, I mean Slashdotted or even splashed in LinuxToday)? That's another part of STO; when they find a vulnerability, the pro-penguin press works together to not let word escape even into the Linux mainstream).

Link to comment
Share on other sites

:blink:

You mean that Linux conspires to keep things secret by publishing their changelog, and their patches with all source code.

Not exactly the best way to keep these vulns secret, is it? :laugh:

Link to comment
Share on other sites

Where online can I test my firewall? I've a hardware wireless router and use - currently - nod32 smart security av and firewall on w7- thinking of using just Morro and 7's firewall and losing nod32 when I get on 7 final- but where can I test if it's sufficient? Using a desktop only on my home network.

Link to comment
Share on other sites

Well if you're using NAT on your router, it's sort of a moot point as no-one can connect back to you because of the way NAT is working... so unless you've got a normal, routable IP address assigned to your PC, I wouldn't worry about it too much.

Link to comment
Share on other sites

Where online can I test my firewall? I've a hardware wireless router and use - currently - nod32 smart security av and firewall on w7- thinking of using just Morro and 7's firewall and losing nod32 when I get on 7 final- but where can I test if it's sufficient? Using a desktop only on my home network.

You could try Leaktest to check for outbound security. But if you're using the W7 firewall, the default settings have no outbound protection. I haven't tried Leaktest on W7, tho. As Chicane says, your inbound is covered by NAT, unless another machine on your LAN gets infected.

Link to comment
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.