Should I replace Windows Firewall?

Should I replace Windows Firewall? I am trying to keep things minimal in terms of security on my Vista machine. So far, I only have Avira AV. Is it advisable to replace Windows Firewall or just keep that? I don't want too many fancy apps.

 

if you are connected via nat on a router i would say you should be ok using the vista fw.

 

Its better to have only one firewall enabled... my windows firewall is off because Norton is taking care of it... I don't know which is better though.. but I haven't seen much complaints or issues with Windows firewall either.

 

Yeah I was thinking of replacing it with Comodo free firewall seeing how much praise its been getting. Don't know if I should do it, I am just a low level simple user.

 

the comodo is a good one, not the most user friendly i've seen.
did you try running online security scans to help you decide if you realy need the extra security ? just an example

 

try Online Armor free or paid version: http://tallemu.com
it is very light and easy configurable firewall + HIPS software.

 

does it run on vista ?
last time i tried it didnt

 

Keep in mind that TallEmu's Online Armor v.3 for Vista is still a beta.
Not to scare you off but it's not the finished product yet.
It's on par with Comodo Firewall Pro though, so definately take a look at these two if you contemplate switching.

 

I guess I am not going to bother switching from Windows Firewall to Comodo as there hasn't been much bad things to be said about Windows Firewall. I'll just leave it as it is.

 

Unless you have Vista Business AND set up the firewall yourself (which is not easy to do consider...well it's in my analysis), you aren't running with a firewall. Here's a write up I did a while ago: http://forum.notebookreview.com/showthread.php?t=243906

 

Hrm I am using Home Premium, in other words, it ain't protecting at all? Nice article. I'll install Comodo I guess.

 

Hi...

Reading through this and related threads, it is becoming fairly obvious that the Windows Firewall is somewhat inadequate especially when considered in light of the newest Comodo and Online Armor.

Yesterday I downloaded and installed Comodo - note I am on XP Pro SP3 and my existing security config runs along the following lines: WIndows Firewall + Avira + Threatfire + SAS (the latest version). I also use CCleaner regularly and have AVG Anti Spyware which I use often.

Installing Comodo was easy. Following the advice on these forum, I did not activate the Defence+ (in light of running Threatfire). There were apparently no conflicts. As prompted I shut down the machine and restarted. Right off the bat I saw that the machine boot-up time was taking much longer than normal. Secondly, I am in the process of downloading a 1.8 gig file. I noticed that with Comodo on the download speed dropped dramatically - to the tune of approximately 25%. I have no idea whether Comodo was doing this or not. So, I uninstalled Comodo and reactivated the Windows Firewall and the download speed picked up again to its usual levels.

So, my question is this: Can or does Comodo actually reduce download speeds? If yes, then would Online Armor be a better option? Again with Online Armor, is the updating feature a matter of uninstalling and reinstalling a fresh version - if yes, this can really be a pain - at least for me.

Given the above, what you you folks suggest? The only restriction I have is that I would like to use a 'free' Firewall (like the other security apps that I have mentioned above).

In the past I have ZoneAlarm, but found it intrusive. It also slowed down the machine a lot. BTW, my machine specs are: 1.8Ghz, 2 Gig Ram. The OS details are above.

Thanks for your help.

 

A good firewall will not have an impact on your download speeds or computer performance. Since you have XP, you should get Online Armor. I prefer that over Comodo any day. By the way, yes, I have tried out Comodo's newest version and I still find it to be a major pain compared to OA. There's also an OA 3 beta that you can download, but I'd stick with the regular version. Right now, there's an annoying bug in OA 3 Beta where your computer might not be able to sleep. They've fixed the problem, but haven't released an updated Beta.

If you still want to stick with Comodo, I'm guessing something is being blocked by it. Check the firewall history and see what's going on

 

OK. Thanks. I will try out Online Armor. Just one more question: Is it true that to update OA one has to uninstall the previous version and reinstall the new version? WHile I don't have a problem doing manual updates, this uninstall and reinstall business would really be a pain.

Thanks

 

That's true. However, that is not the case with OA 3. Considering there probably won't be anymore updates for OA 2, you'll only have to do it once when you switch to OA 3. Actually...now that I think about it, I don't remember uninstalling OA 2 when I tested OA 3.

 

hmmm...ok thanks. I just installed OA 2.xx. It seems to be more responsive that Comodo and the download speeds that I was referring to earlier are normal as they were under Windows Firewall...so that's a good thing. I have also not noticed any unnecessary pop-ups...though OA is still 'learning' for a few are coming up but nothing major.

So, as of now my security-related lineup stands as follows:

Avira + OA + Threatfire + SAS + commonsensical online habits...

Good enough?

Thanks.

 

Yeah that should do. I just like to have a secondary anti-virus and anti-spyware scanner, but it's not really necessary. I don't know enough about Threatfire to know if you need it or not. I've never heard of people using a combo of OA and Threatfire. It's usually Comodo with Defense+ off and Threatfire (TF covers what you're missing with Defense+ off). I think OA covers what Threatfire would bring to the table. I don't think it should cause conflicts.

 

Hi...

What do you mean by a secondary anti-virus? Can you please list a few names and usage habits/ patterns?

And as a 'secondary anti-spyware scanner', does AVG's Anti-Spyware count? I keep it updated and use it on demand rather than having it run all the time. If this is not what you mean, then can you suggest something?

Thanks

Edit: I saw in another thread you mentioned you have both Avira AND Avast installed. Can you please explain how you installed and configured them to avoid conflicts and what your usage practices are for maximum possible security? I am currently downloading avast simply because I would like the email scanning facility - I use Outlook...thus the question. Thanks

 

Right now I'm using a number of programs. This is not to say this level of security is needed, it's just what I run.

Anti-virus Primary: Avira: Active Protection on

Settings for Avira:
Scanner: All Files
Guard: Scan when reading and writing, Scan archive, Use smart extensions

Anti-virus Secondary: Avast: Active Protection off, used as on-demand scanner only

Avira does protect you from email based attacks, but in a different way. If you ever download anything bad or it tries to do anything, Avira will pick it up. OA will also probably take action. I should add that I use Gmail; however, if you're using something like Thunderbird, Avira will still protect you.

If you want a better explanation of how Avira free still protects you (I know I didn't do a good job), head on over to their forums. I remember reading a good explanation on how it works.

Anti-spyware:

Spyware Blaster: Good passive protection that uses zero resources.
Malwarebytes Anti-Malware: Solid program
Super Anti-spyware: Active protection off
Winpatrol: Active monitoring of registry and other files

I don't really need or want active protection for spyware beyond what I already have up.

Firewall: Online Armor

I run scans about once every week or so. Right now I'm not concerned with picking up spyware or a virus because I pretty much only go to sites I know. If I'm on a college network, you better believe I scan more regularly.

 

Hey...thanks. I think I will pass on the Avast especially since you say it does scan for email-based virus. I think I will get WinPatrol and Malwarebyes.

Also, what is the difference between SAS and Spyware Blaster? Any reason why both should be used?

Thanks

 

Similar experiences here. Had ZA for 5 years until it got so "secure" that it wouldn't let me run my own machine. All the programs, when set for online scanning will slow things down because they have to examine every byte coming in and going out, all in real time. I finally got smart(er) and did the following: Installed free HOSTS server and HOSTSMAN. Now, 95% of malware gets blocked, not by examining it byte by byte, but by refusing to connect to the URL that's sending it. Faster, easier. For viruses, I now use free AVG with online services off. I scan once a week. Ho hum. No bites again , ha ha.
I actually started using Windows firewall after ZA because it doesn't seem to bother with the hundreds of already clean processes and programs running on my rig every day. Haven't had a serious virus or malware in years. Knock on wood..........

 

The Vista firewall is pretty good actually. It does both incoming and outgoing blocking; however, it is almost impossible to figure out how to configure outgoing blocking.

I went with ZoneAlarm AntiVirus. Not free, but it is better than the free ZoneAlarm (ZAAV has Program Controls) and I found ZAAV to be far more stable than Comodo.

 

I've installed Comodo but everytime I run a program it launches up the Defence+ window and asks me if I want to allow it. Should I just disable Defence+? I only need the firewall portion, what exactly is Defence+?

 

Defense+ is the HIPS part of Comodo.
You can disable it if you don't want to use it or if you are unsure how to.
Check the Comodo website/forum to read about it, so you know exactly what you aren't using.
If you have disabled Defense+, you can use ThreatFire as a replacement.
It's not a HIPS but an easy to use, excellent behavioural blocker that offers real-time protection.
Cheers.

 

What are your D+ settings? Normally, if you're sure your system is clean, it should be set to "Clean PC Mode" Once you open and use all your programs pops should be next to nothing unless you install new programs, in which you change the setting to installation mode. Or you could set it to "training mode" you'll get balloon training messages but can disable those.

After a few weeks in Clean PC mode" and dealing with pending files ((purge, look up, submit, remove), "safe mode" will do.

 

Hi...

Well as a few of my most recent posts suggest, it is only been a few days that I ditched the Windows FireWall. Based on discussion on NBR, I had basically two choices - Online Armor and Comodo 3.xx. Initially I tried the Comodo and found that it was - or so I thought - retarding some very large file transfers that I was/ am doing. So, I uninstalled that and went with Online Armor. This I used in conjunction with Threatfire.

Then I read a couple of things - First is that Threatfire has been bought up by Norton (or was it Symantic, or is it the same thing). This bodes ill for this otherwise excellent program. The second thing I read was that Online Armor while being excellent for the XP platform (apparently they are working on a Vista version - btw, I use XP) was - at least in the free version - not rated as high as Comodo. I am sure of this though. I'll try and look up the reference.

So, I ditched OA and Threatfire and went back to Comodo. It so happens that the download problems with Comodo that I was referring to was not a function of Comodo. An alert poster did ask me check this out, I should mention. Anyways, I now use Comodo with the Defence+ having ditched the Threatfire program also (quite reluctantly).

I have found no issues with Comodo and Defence+ thus far - but it has only been a few hours - precisely 30 hrs or so.

Unlike quite a few other posts, I have not found Comodo to be intrusive. Yes, when I paired my Treo with the machine over BT, it did pop up some questions. There were a few other questions also, but nothing that I would consider irritating. Its has been stable and silent.

One more thing: I have also read on these threads that Comodo sometimes hinders startup times and shutdown times. I cant say that I have faced any of this as of yet.

The only thing I have found is that the Comodo download is approximately double that of OA. But in the scheme of things it is not a huge amount and it uses around 5.6K of Ram, which is not all that bad at all.

All in all I have found the Comodo experience thus far quite good. Of course, as the saying goes: "Your Mileage will Vary"!

Cheers!

 

Guys, I just uninstalled Comodo but when under Windows Security Center it still says that I have Comodo and Windows Firewall on. How do I make Comodo go away? Or is something left uninstalled?

 

There's a way to make Windows Security Center rebuild the data it draws upon. Google should find it. I had to do it after uninstalling Comodo, too.

UPDATE: This is not the way I did it, but it actually looks like a better way than what I did do. Give it a try. Post back if it does work so we know.

 

This is what you do for XP. Maybe it works for Vista as well.


1. Open "Control Panel"
2. Select "Performance and Maintenance" (if you see Admin tools, just click on that)
3. Select: "Administrative Tools"
4. Double-click "Services"
5. Locate: "Windows Management Instrumentation", right click on it and select "Stop"
6. Go to the "wbem" folder (C:\Windows\system32\wbem)
7. Locate the "Repository" folder and delete it (DELETE ONLY THE REPOSITORY FOLDER!!)
8. Repeat steps 1 - 5 but this time right click on "Windows Management Instrumentation" and select "Start". This will recreate the "Repository" folder.
9. Reboot your computer

 

This is the way I did it before, but I am still curious if the way I posted a few posts earlier works, too. If anyone has the situation currently to check it out, that would be great.

 

Just did this, it works for Vista too.

 

Yep. That is the way I did it before myself. Still, wondering if the other way also works under Vista. If anyone in the distant future who happens to have this situation and is looking for a solution and happens across this thread wants to try the other solution and post back the results, thanks in advance (or actually in arrears, as you are in the distant future and this is being written in the past from your perspective).

 

Actually ThreatFire is a PC Tools product, so I wouldn't worry about it getting "Nortonized" anytime soon! I'm using it now and it's great.

Anyway, is Online Armor now Vista ready?

 

Unfortunately, not yet. I'll post up when OA 3 is out of beta. I believe OA 3 beta free works with Vista.

 

ThreatFire is a PCTools program but Symantec has bought PCTools so they own ThreatFire as of now and will probably incorporate the behavioural blocking technique in a paid product like NIS.
We'll have to see how long the current free version stays available as it is...

Online Armor V.3 beta is Vista ready. But a beta...
Cheers.