Definitive Best Firewall 2011

[Yusuf M. Veteran]

An updated "Best Firewall" poll for 2011. Please use this as a reference when researching Firewall utilities. As time goes on, the poll can be updated to add further options.

Happy Voting!

[bozthepcnerd]

If its a stand-alone box that can be used, I like Endian Firewall.

If its on a PC, not actually sure, I'd probably go with ESET.

[PGHammer]

If its a stand-alone box that can be used, I like Endian Firewall.

If its on a PC, not actually sure, I'd probably go with ESET.

While ESET is good, like most "fee" firewalls, they have had to "bulk up" to compete with free products (which are no longer jokes simply by being free, especially with Microsoft in the mix).

I've no experience with ESET (therefore, I have only the opinions of others). CheckPoint *has* fixed the problems that had been plaguing ZoneAlarm (which, like ESET and Kapersky, has bulked up).

However, my recommendation for best definitive firewall remains the *only* free firewall that I recommend and use personally - Microsoft Security Essentials/Microsoft Forefront Endpoint Security.

While light in code, it remains as impervious as any of the "fee" firewalls (including ESET) at the default settings; unlike ESET (in fact, unlike most "fee" firewalls) it doesn't take an advanced degree to configure, either.

[Sir Topham Hatt]

Currently using Esset's firewall.

During May, my subscription runs out, so I'll switch to Microsoft's AV/Firewall.

[StrikedOut]

Windows 7 firewall is such a jump forward to XP SP2, does a perfect job for my needs.

[lamminium]

Matousec's Security Challenge has always been a good source for choosing software firewall. :)

[Nevis]

Norton's firewall is very strong .. also love comodo :)

[Kudo]

Windows Built-In Firewall :)

[cork1958]

PrivateFirewall, http://www.privacyware.com/personal_firewall.html, is what I've been using, although seeing one of these older "definitive" polls, I came across Windows7FirewallControl, which is what I'm using on this computer at the moment.

Using the free version which doesn't allow you to control system connections and using it WITHOUT enabling windows built in firewall.

Otherwise, just plain ol' NAT router is enough for me also.

[divinechild]

For years, I've been happy with Kerio firewall, but it's a shame they didn't evolved toward windows vista/seven... :-(

So for Seven, I use Comodo's one...

To those who claim NAT is enough, I'm sorry to tell them they're wrong !

Internet has become nasty and dangerous, many protections are never enough xD

[The_Observer]

So for Seven, I use Comodo's one...

+1

[Jen Smith]

For me anyway, most of my Windows boxes just use the built in Windows 7 firewall. The *Nix boxes mostly run IPTables or IPFilter depending on what OS it is. I keep a close eye on what's installed, and I really don't need a popup confirming every little thing that's going on. Stuff coming in is blocked by default, and I can block specific stuff from going out, good for my needs. My virtual machine "junk box" that runs unknowns or just temporary things however has Comodo running in "ultra anal" mode, and it does a good job monitoring everything and anything that's going on. Granted, it takes about 20 dialog boxes to get a new program going, but that's why it's there. Pretty light on the resources as well too. If I was the type that blindly ran programs first and wondered if that was a mistake later, I'd feel pretty comfortable with it.

[rich123]

I have used several firewall solutions for years, and I recommend Comodo Firewall.

[mujjuman]

I love Comodo. free, fast, easy to use and it works

[CUBBYJR2005]

I say norton for paying one and free one microsoft

[TEX4S]

software-based firewalls = laughable.

hardware based firewalls = the way to go.

I'm a big fan of Sonicwall of course, always like Cisco's stuff (except for my crappy E4200) :angry:

I never messed with Watchguard and there is 1 other I cant think of that is real popular.

As mentioned/argued in the previous 2010 firewall thread - software-based firewalls' only reason for existence is keeping bad stuff from getting out.

But as most people have a router - having an add-on SW firewall makes about as much sense as ... well doesnt really make any sense.

I'd appreciate someone in IT Security to tell me why SW-based firewalls still exist - or is it another "prying on the people who dont know any better" ?

For that matter - when it comes to SW firewalls, why is anything necessary more than windows' ?

EDIT:

I just thought of something which kinda answers my own question.

Hardware-based FW dont protect against SPAM, and phishing and stuff, right ? So - they pretty much justifies a need ? meh :(

[xxtechxx]

i choose online armor :)

simple and easy to use

[fr33k]

Switched my vote from ZoneAlarm to Comodo. I liked the previous versions of ZoneAlarm which has great application filtering, but they never changed the vsmon so it wouldn't use so much cpu when you have a lot of connections and or using a lot of bandwidth, so I tried a few other firewalls with application filtering, and at this point Comodo wins. It has good applications filtering if you set it up right.

If you aren't paranoid, and don't care what programs connect, or when they connect to the Internet then The OS based firewall is fine.

[Innuendo]

Agnitum's Outpost Security Suite Pro for me. It's one of the few firewalls that can brag 100% leaktest protection. Bought it years ago when Agnitum was running a lifetime license sale.

Simply indispensable...especially when you're curious about what programs you are using that are trying to phone home on the sly.

[+Gary7 Subscriber²]

I use Avast Internet Security.

[Detection]

Comodo or ZoneAlarm are my usual choices - but Comodo's download link seems to be broken right now...

[Grope for Luna]

Here is a nice Task Scheduler based notifier for outgoing connections when using Windows Firewall:

http://wokhan.online.fr/progs.php?sec=WFN

[cropcircles]

Norton Internet Security runs very smooth and quiet and doesn't interfere with my computer. Unlike Norton from several years ago that was bulky and a resource hog the last couple years versions are streamlined and IMO the top rated security suite out there and I've tried almost all the ones listed in this survey and almost all of them were annoying in some way or slowed down my system.

http://www.pcmag.com/article2/0,2817,2369749,00.asp