Why is a software firewall important even when you're behind a router?


Recommended Posts

really depends on the situation, at home a software firewall is not a big issue or need, just sit behind my router

if i was out and about using public wifi yes id consider software firewall more

in a business scenerio you might want a software firewall so they can track potential virus infections as well as block unauthorized applications

The main advantage of a software firewall is that it blocks both outbound, and inbound connections, whereas usually routers normally only block inbound connections, so software firewalls may be able to prevent malware from phoning home.

Behind a firewall it does not make much sense. But if your on same network with other host and they could be infected then it becomes a necessity. For example in Hot Spots you are behind a firewall but at the same time other hosts are sharing same LAN network with you.

In short, router's firewall is protecting you from external threats. Software firewall is protecting you from external as well as internal threats.

Most routers also have their own firewall plus customizable filtering besides NAT. But yes still at least keep the built in Windows one on. For outgoing application control/notification over the Windows Firewall (Vista/Windows 7), install a small tool like Vista/Windows 7 Firewall control. No more phoning home apps and malware.

Behind a firewall it does not make much sense. But if your on same network with other host and they could be infected then it becomes a necessity. For example in Hot Spots you are behind a firewall but at the same time other hosts are sharing same LAN network with you.

In short, router's firewall is protecting you from external threats. Software firewall is protecting you from external as well as internal threats.

+1 Software firewall can help protect pc in same network but at the same time it can be compromised too...

It def adds up a layer of security..

The main advantage of a software firewall is that it blocks both outbound, and inbound connections, whereas usually routers normally only block inbound connections, so software firewalls may be able to prevent malware from phoning home.

That's the only reason I use one. There's been a few times that has been very helpful.

The simple reason is because if you're behind your hardware firewall and a machine on the network is infected, it can infect you too, or get data off your system without you knowing, send it out as kind of a proxy.

I use the built-in Windows one, that works fine in addition to my hardware one.

It depends on the user to be fair. If the user is the sort of person who is always getting infected no matter what you do to safeguard them, then a proper software firewall is more about protecting other people on the same network or stopping DDoS on attacks on external networks that the computer may be used in.

And some people are paranoid and want to know and control every single bit of information that is leaving their system.

And in a corporate environment, if the system engineer did a proper job, then software firewalls are even more redundant because the managed switches/routers will stop anything that isn't supposed to be happening before it even leaves the users nearest network port.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.