RE: Need firewall protection, -- PCTECH

Security should be like ogres and onions.  That is, layered.  Running a
(well designed) software firewall should have minimal impact on the PC
and can provide protection against evildoers that can get around your
hardware firewall.  Most hardware firewalls, epsecially consumer grade,
don't filter out-bound traffic.  So if you machine was compromised by
visiting a questionable site (also allowed via most common FW rules) or
loading malware attached to something you bought/downloaded, your PC
could still pick up a virus, be a drone for a DoS attack, etc.

Unless you are very careful about the sites you visit, and the admins of
those sites are very careful and diligent about the maintenance and
security settings of all of their web & app servers, you are at risk.
While not the be-all, end-all solution, a software FW is definitely a
good thing to be using.

And of course, if you're running wireless at home/work, you have to
consider your network as insecure unless you're running WPA only (WEP is
practically useless) and/or running all wireless connections through a
VPN.

John A. Jones
Americas Security Officer
Jones Lang LaSalle, Inc.
V: +1-630-455-2787 F: +1-312-601-1782
John.Jones@xxxxxxxxxxxxxxxxxxxxxxx

-----Original Message-----
From: David Gibbs [mailto:david@xxxxxxxxxxxx] 
Sent: Thursday, July 29, 2004 6:49 AM
To: PC Technical Discussion for iSeries Users
Subject: Re: [PCTECH] Need firewall protection,

Tom Liotta wrote:
> If I use a hardware firewall that I'm not familiar/comfortable with, 
> I'll still keep ZoneAlarm active at least until after I know more 
> about what's going on with it.

The only time I would consider using a software firewall when I'm behind
a router is if I don't trust the other computers that are behind the
router with me.

I always run zone alarm when I am traveling ... even when I am in a
private network ... as I don't trust the other people using the internet
connection I'm on.

david

--
I never think of the future - it comes soon enough.
-Albert Einstein
--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list To post a message email: PcTech@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives at
http://archive.midrange.com/pctech.


This email is for the use of the intended recipient(s) only.  If you have 
received this email in error, please notify the sender immediately and then 
delete it.  If you are not the intended recipient, you must not keep, use, 
disclose, copy or distribute this email without the author's prior permission.  
We have taken precautions to minimize the risk of transmitting software 
viruses, but we advise you to carry out your own virus checks on any attachment 
to this message.  We cannot accept liability for any loss or damage caused by 
software viruses.  The information contained in this communication may be 
confidential and may be subject to the attorney-client privilege. If you are 
the intended recipient and you do not wish to receive similar electronic 
messages from us in future then please respond to the sender to this effect.