Support in other languages: 
Showing results for 
Search instead for 
Do you mean 
Reply
Guru
PeterTWJ
Posts: 1,102
Registered: ‎05-29-2010
Location: Singapore
Accepted Solution

Do you need Software Firewall when you have Hardware / Appliance Firewall?

Hi all

For my home network, my gateway has a built-in firewall and my computers have their own firewall too. So far it's working fine.

 

I heard some of them said this configuration is better, as firewall from different vendors has it's vulnerability. Using both with the correct configuration provides dual protection. (Similar to Back-to-back deployment) If one is down, the other is still protecting it. 

Some of the users prefers to have either software or appliance firewall, as they said less inspection and better network performance.  

 

However, I have seen organizations with either using only appliance firewall or both appliance + software firewall.

What is the best practice for implementing / choosing different kinds of firewall setup?

Please advise. Thanks! :smileyvery-happy:

Cheers :smileyvery-happy:

Peter
(Current: W520 4284-A99) (Refunded: W510 4876-A11)

=============================================
Does someone’s post help you? Give them kudos as a reward, as they will do better to improve :smileyvery-happy:

Mark it as solved if the solution works for you, so it could be reference for others in the future :smileyvery-happy:

 

Dolby Home Theater v4 (ThinkMix V2)!

http://forums.lenovo.com/t5/W-Series-ThinkPad-Lapt​ops/W520-Sound-Enhancement-Thread/m-p/451401#M155... 

Bugbatter
Posts: 736
Registered: ‎05-01-2010
Location: USA

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?


 

Using both with the correct configuration provides dual protection. (Similar to Back-to-back deployment) If one is down, the other is still protecting it. 

 



For the home user, I agree with that approach -- in other words: a "belt and suspenders".
I'm a firm believer in a hardware as well as a software firewall. If malware can get through the hardware firewall, the software firewall is still there for protection.



If you find a post helpful and it answers your question, please click the "Accept As Solution" button.

Lenovo Advocate ~ I am not employed by Lenovo or Microsoft. I am a volunteer.

Microsoft MVP - Consumer Security

SpywareHammer

Lenovo Technology Partner
PCBruiser
Posts: 12
Registered: ‎11-27-2011
Location: Pennsylvania, US

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?

Supplementing what Bugbatter stated, there really are two major types of "directional" malware:  those that are "inbound" and those that are "outbound"  There is no question that a hardware firewall does a great job of protection a LAN from inbound threats, e.g., port scans.  However due to hardware firewalls' inherent design, they do not provide protection from outbound threats, e.g., Trojan backdoors for an example.  Software firewalls, or HIPS, which can provide software specific protection, are far more effective in protecting systems from outbound threats.  It is the correct combination of both types of firewall protection that offer the greatest protection.  At bottom, however, you are the greatest factor in protecting your system from malware.  Safe browsing, intelligent limiting of personal information, educating yourself and understanding the nature of malware threats, keeping your security suites up to date, etc., provides the greatest protection.

 

Don't Read? Can't Learn!
Administrator, SpywareHammer.com
goretsky
Posts: 1,976
Topics: 19
Kudos: 352
Solutions: 139
Registered: ‎12-01-2007
Location: California, USA
0

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?

Hello,

 

As  noted, we're actually talking about a standalone device and a program that you run on your computer which are complementary to each other.  While there's a small overlap in protection, using your residential gateway broadband router's firewall and a application firewall program on your computer should neither slow down your connection noticeably, nor should they conflict with each other, so there's no real reason not to use both, if you have them available.

 

Another useful reason to have a software-based firewall on your computer is if your network connection is shared with others (family members, friends, tenants, and so forth).  In the the event another computer inside your network gets compromised with, say, a worm, your firewall should detect the connections from the infected computer and provide you with a warning and block the unauthorized network connection to prevent your computer from becoming infected.

 

Regards,

 

Aryeh Goretsky

 

 

 

 



I am a volunteer and neither a Lenovo nor a Microsoft employee. • Dexter is a good dog • Dexter je dobrý pes
S230u (3347-4HU)X220 (4286-CTO)W510 (4318-CTO)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)T61p (6459-CTO)T43p (2678-H7U)T42 (2378-R4U)T23 (2648-LU7)
de.gif  Deutsche Community es.gif  Comunidad en Español ru.gif Русскоязычное Сообщество
Punch Card
rpggamergal
Posts: 6
Registered: ‎11-14-2011
Location: Australia

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?

It's always good to use both(hardware and software) firewall to complement each other. We have 5 PCs in our home network sharing connection and each system has its own software firewall in addition to the gateway firewall and it's good as it makes us feel more secure.

Though a network may have all the security precautions hardware-software firewalls, antivirus/anti-malware, updates etc. rogues and some nasties are still able to get in so it's also very important that users are well-informed on safe internet browsing and using the computer with security in mind.

---------------------------------------------------------------------------
Microsoft MVP - Consumer Security
Zone Advisor at Experts-Exchange.com