Showing results for 
Search instead for 
Do you mean 
Reply
Guru
Posts: 1,268
Registered: ‎05-29-2010
Location: Singapore
Message 1 of 5 (1,014 Views)

Do you need Software Firewall when you have Hardware / Appliance Firewall?

Hi all

For my home network, my gateway has a built-in firewall and my computers have their own firewall too. So far it's working fine.

 

I heard some of them said this configuration is better, as firewall from different vendors has it's vulnerability. Using both with the correct configuration provides dual protection. (Similar to Back-to-back deployment) If one is down, the other is still protecting it. 

Some of the users prefers to have either software or appliance firewall, as they said less inspection and better network performance.  

 

However, I have seen organizations with either using only appliance firewall or both appliance + software firewall.

What is the best practice for implementing / choosing different kinds of firewall setup?

Please advise. Thanks! :smileyvery-happy:

Cheers :smileyvery-happy:

Peter
(Current: W520 4284-A99) (Refunded: W510 4876-A11)

=============================================
Does someone’s post help you? Give them kudos as a reward, as they will do better to improve :smileyvery-happy:

Mark it as solved if the solution works for you, so it could be reference for others in the future :smileyvery-happy:

 

Dolby Home Theater v4 (ThinkMix V2)!

http://forums.lenovo.com/t5/W-Series-ThinkPad-Lapt​ops/W520-Sound-Enhancement-Thread/m-p/451401#M155... 

Highlighted
Posts: 1,407
Registered: ‎05-01-2010
Location: US
Message 2 of 5 (1,009 Views)

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?


 

Using both with the correct configuration provides dual protection. (Similar to Back-to-back deployment) If one is down, the other is still protecting it. 

 



For the home user, I agree with that approach -- in other words: a "belt and suspenders".
I'm a firm believer in a hardware as well as a software firewall. If malware can get through the hardware firewall, the software firewall is still there for protection.





English Community   Deutsche Community   Comunidad en Español   Русскоязычное Сообщество
If you find a post helpful and it answers your question, please click the "Accept As Solution" button.
T530 - Helix Gen 1 - Yoga 900

I am not employed by Lenovo or Microsoft. I am a volunteer.
Microsoft MVP - Consumer Security
SpywareHammer

Lenovo Technology Partner
Posts: 12
Registered: ‎11-27-2011
Location: Pennsylvania, US
Message 3 of 5 (989 Views)

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?

Supplementing what Bugbatter stated, there really are two major types of "directional" malware:  those that are "inbound" and those that are "outbound"  There is no question that a hardware firewall does a great job of protection a LAN from inbound threats, e.g., port scans.  However due to hardware firewalls' inherent design, they do not provide protection from outbound threats, e.g., Trojan backdoors for an example.  Software firewalls, or HIPS, which can provide software specific protection, are far more effective in protecting systems from outbound threats.  It is the correct combination of both types of firewall protection that offer the greatest protection.  At bottom, however, you are the greatest factor in protecting your system from malware.  Safe browsing, intelligent limiting of personal information, educating yourself and understanding the nature of malware threats, keeping your security suites up to date, etc., provides the greatest protection.

 

Don't Read? Can't Learn!
Administrator, SpywareHammer.com
Posts: 2,451
Topics: 20
Kudos: 423
Solutions: 193
Registered: ‎12-01-2007
Location: US
Message 4 of 5 (918 Views)

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?

Hello,

 

As  noted, we're actually talking about a standalone device and a program that you run on your computer which are complementary to each other.  While there's a small overlap in protection, using your residential gateway broadband router's firewall and a application firewall program on your computer should neither slow down your connection noticeably, nor should they conflict with each other, so there's no real reason not to use both, if you have them available.

 

Another useful reason to have a software-based firewall on your computer is if your network connection is shared with others (family members, friends, tenants, and so forth).  In the the event another computer inside your network gets compromised with, say, a worm, your firewall should detect the connections from the infected computer and provide you with a warning and block the unauthorized network connection to prevent your computer from becoming infected.

 

Regards,

 

Aryeh Goretsky

 

 

 

 



I am a volunteer and neither a Lenovo nor a Microsoft employee.

S230u (3347-4HU)T23 (2648-LU7)T42 (2378-R4U)T43p (2678-H7U)T61p (6459-CTO)P50 (?-CTO)W510 (4318-CTO)W530 (2441-4R3)W530 (2441-4R3)X100e (3508-CTO)X120e (0596-CTO)X220 (4286-CTO)X250 (?)

  Deutsche Community   Comunidad en Español Русскоязычное Сообщество
Punch Card
Posts: 6
Registered: ‎11-14-2011
Location: Australia
Message 5 of 5 (905 Views)

Re: Do you need Software Firewall when you have Hardware / Appliance Firewall?

It's always good to use both(hardware and software) firewall to complement each other. We have 5 PCs in our home network sharing connection and each system has its own software firewall in addition to the gateway firewall and it's good as it makes us feel more secure.

Though a network may have all the security precautions hardware-software firewalls, antivirus/anti-malware, updates etc. rogues and some nasties are still able to get in so it's also very important that users are well-informed on safe internet browsing and using the computer with security in mind.

---------------------------------------------------------------------------
Microsoft MVP - Consumer Security
Zone Advisor at Experts-Exchange.com



Top Kudoed Authors
User Kudos Count
1
1