up vote 7 down vote favorite
1
share [g+] share [fb]

I used to use a third-party firewall like ZoneAlarm and some others whose names I forget, but their complexity ended up annoying me. Assuming one runs his computer as a normal user/powersuser, is it fine to just use the Windows XP built-in firewall?

link|improve this question
82% accept rate
feedback

4 Answers

up vote 11 down vote accepted

For inbound protection the answer would be : Yes, it is sufficient.

For outbound protection, the answer would be : No, insufficient.

Even the improved Windows Vista version of the firewall still scores poorly when it comes to outbound protection.

See the articles below for an in-depth analysis of the strengths and weaknesses of the Windows Firewall (applies to both XP and Vista):

Analysis: New Windows Vista Firewall Fails on Outbound Security

Windows Firewall Review (XP)

If you computer is virus and malware free to begin with, and you are vigilant about keeping a modern antivirus/malware suite constantly updated, then running the Windows Firewall alone should be sufficient.

link|improve this answer
2  
well, I would dispute that outbound "firewalling" is really necessary (or even fits the definition of the word) but it's a fair point – Jeff Atwood♦ Aug 18 '09 at 11:06
Blocking outbound connections serves three purposes. One, it protects your information against anything that slipped through and is communicating out. Two, it save your bandwidth (although minor) against anything unwanted communicating out. Three, and most important, it can help protect other machines on your same network with the same vulnerability that got your machine infected. – MaQleod Apr 8 '11 at 19:14
feedback
up vote 4 down vote

Yes, assuming you are fully patched the default firewall provided by Windows XP should be sufficient.

link|improve this answer
6  
Unless you need outbound filtering. Which is rare for home PCs, though. Anyway, companies like ZoneAlarm like to sell products and the easiest is by scaring people into buying it. And a firewall which annys the user ten times a day with some alert about an evil hacker it just fended off seems to work better for that purpose :) – Joey Aug 3 '09 at 8:04
feedback
up vote 4 down vote

The windows firewall will block all attemts to connect to your computer from the outside - those are the ones that might break into your previously unbreached system. If you're behind a NAT router (usually the case when you use WiFi), even that is not necessary, since the router has the same effect.

The only additional benefit a third-party firewall can offer is to alert/protect you when your computer is already infected with something that tries to "phone home" - but chances are that a real virus will disable the firewall anyway; and nowadays there's so much stuff that connects to the net in some form (often looking for updates) that any malicious activity probably gets drowned in the noise.

link|improve this answer
+1 forget Windows Firewall; just concentrate on hardening the single chokepoint for most home networks, the router. – hyperslug Aug 3 '09 at 9:10
I'd definitely recommend a router. – Umber Ferrule Aug 3 '09 at 17:01
feedback
up vote -1 down vote

I recently read something at windowsecurity.com that said it was insufficient and that you should get a second firewall. I have Outpost from Agnitum and it is great

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.