Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I used to use a third-party firewall like ZoneAlarm and some others whose names I forget, but their complexity ended up annoying me. Assuming one runs his computer as a normal user/powersuser, is it fine to just use the Windows XP built-in firewall?

share|improve this question
up vote 11 down vote accepted

For inbound protection the answer would be : Yes, it is sufficient.

For outbound protection, the answer would be : No, insufficient.

Even the improved Windows Vista version of the firewall still scores poorly when it comes to outbound protection.

See the articles below for an in-depth analysis of the strengths and weaknesses of the Windows Firewall (applies to both XP and Vista):

Analysis: New Windows Vista Firewall Fails on Outbound Security

Windows Firewall Review (XP)

If you computer is virus and malware free to begin with, and you are vigilant about keeping a modern antivirus/malware suite constantly updated, then running the Windows Firewall alone should be sufficient.

share|improve this answer
well, I would dispute that outbound "firewalling" is really necessary (or even fits the definition of the word) but it's a fair point – Jeff Atwood Aug 18 '09 at 11:06
Blocking outbound connections serves three purposes. One, it protects your information against anything that slipped through and is communicating out. Two, it save your bandwidth (although minor) against anything unwanted communicating out. Three, and most important, it can help protect other machines on your same network with the same vulnerability that got your machine infected. – MaQleod Apr 8 '11 at 19:14

Yes, assuming you are fully patched the default firewall provided by Windows XP should be sufficient.

share|improve this answer
Unless you need outbound filtering. Which is rare for home PCs, though. Anyway, companies like ZoneAlarm like to sell products and the easiest is by scaring people into buying it. And a firewall which annys the user ten times a day with some alert about an evil hacker it just fended off seems to work better for that purpose :) – Joey Aug 3 '09 at 8:04

The windows firewall will block all attemts to connect to your computer from the outside - those are the ones that might break into your previously unbreached system. If you're behind a NAT router (usually the case when you use WiFi), even that is not necessary, since the router has the same effect.

The only additional benefit a third-party firewall can offer is to alert/protect you when your computer is already infected with something that tries to "phone home" - but chances are that a real virus will disable the firewall anyway; and nowadays there's so much stuff that connects to the net in some form (often looking for updates) that any malicious activity probably gets drowned in the noise.

share|improve this answer
+1 forget Windows Firewall; just concentrate on hardening the single chokepoint for most home networks, the router. – hyperslug Aug 3 '09 at 9:10
I'd definitely recommend a router. – Umber Ferrule Aug 3 '09 at 17:01

I recently read something at that said it was insufficient and that you should get a second firewall. I have Outpost from Agnitum and it is great

share|improve this answer
may I suggest two things for you to get a better score: link the actual article from please. specify what makes outpost great compared to other firewalls (at least xp's) or remove it from the answer altogether. – n611x007 Sep 2 '12 at 12:00

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .