Continued from page 1
With a hardware Firewall in place, there will be less questionable incoming traffic for
software Firewall to analyze, thus fewer excuses for it to bother you with a request for a decision. And therefore fewer chances for you to give a dangerous answer.
This improvement in usability is not a minor matter. The difference can be so pronounced that people who install a hardware Firewall after having a software type in place for a while, begin to wonder if
latter is still working, so reduced are
“alarms” they have to respond to.
Another reason for using both hardware and software Firewalls is that software is … well, software. And software, any software, can be compromised. On
other hand
hardware Firewall, with very few exceptions, can only be “got at” physically – a baddie has to have hands-on access to
Firewall to do anything nefarious with it.
Finally, both software and hardware can fail for any number of reasons. If a good software firewall encounters a problem it should be designed to fall back to some sort of safe mode, blocking all Internet traffic until
problem is dealt with.
But if something should occur that forced
software Firewall to shut down or that prevents it from loading at all (something many Trojans attempt to do), it is no longer an impediment to unauthorized data. You could well be vulnerable to attack and remain blissfully unaware of
fact. On
other hand, if
hardware Firewall fails it will do so in such a way that access to and from
Internet is cut off altogether. The hardware Firewall, by its very nature, can only fail on
side of complete safety. If it's "not there", neither is
Internet connection.
Well … does that make
software Firewall too much trouble? No way !!! A good software Firewall that does its job properly is positively invaluable for its management of outgoing connections, which is where one of
biggest threats to your security lies. A very, very strong case can be made for having both types in place. I do, as do most professionals with an understanding of, and a respect for, data security.
At
very least you should install a good software Firewall on each PC for which you are responsible. A consistent Editor's Choice selection, probably
most-recommended by IT professionals, and my personal choice is ZoneAlarm from Zone Labs. There are both free and PRO versions, with various licensing options. Even if you are eligible to use
free version I do encourage you to at least give PRO serious consideration and look at
extra features you get over
free version. http://HackersNightmare.com?res=ZoneAlarmPRO
There is no space here to discuss hardware firewall recommendations, as
most suitable type will depend on a number of factors. Seek advice from a reputable computer dealer or consult a more detailed resource such as my book "The Hacker’s Nightmare".
If this newsletter has been passed on to you by a friend, please subscribe to it yourself so you can be sure of receiving
next part in this series, when I'll show you how to keep your sensitive electronic correspondence completely confidential, even if someone does manage to intercept your eMail.
-------------------------

Bill Hely is an Australian technologist, consultant and author whose professional focus has been on advising and supporting small business operators in IT and Office Productivity - and rescuing them when they didn't heed his advice the first time around. He is the author of several books on technology for the business person, including the Bible of Internet and PC security "The Hacker's Nightmare" - http://HackersNightmare.com