• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 331
  • Last Modified:

Do I Need To Keep Running A Sorftware Firewal Now That I Installed A Router?

Have run ZoneAlarm for some time.  Nice program, albeit a little too aggressive at times.  I bought and installed a router yesterday.

Do I still need to run ZoneAlarm?  Advantages?  Disadvantages.  Compare and contrast. :)
0
StuartGriffen
Asked:
StuartGriffen
5 Solutions
 
r-kCommented:
I guess I would vote to keep it running. It does give you an extra layer of protection in case another infected PC is connected your side of the router.  It also provides a first level of alert in case your PC were to become infected somehow (e.g. via an infected program download or clicking on an email link).

The disadvantage is what you mentioned. ZoneAlarm can be obtrusive sometimes. If you want to remove Zone Alarm I would still enable the XP firewall (assuming you have XP). It only blocks incoming traffic but is a lot easier to live with than ZoneAlarm.
0
 
war1Commented:
Greetings, StuartGriffen !

A router only blocks incoming traffic.  ZoneAlarm blocks both outgoing and incoming traffic.

ZoneAlarm uses a lot of your computer resources and sometimes interferes with other programs.  If you are not having such problems, keep and use ZoneAlarm.

Best wishes!
0
 
RiDo78Commented:
To build upon war1's comment...

If you are behind a router you are (usually) protected to incoming traffic. So if there's an infection that opens up a port on your PC for someone, you don't have to worry that this port is beeing exploided as it can't be accessed from the outside. However, you still have the infection.

Plus, there are many virusses and worms do a 'call home' to receive instructions. They usually connect to an IRC server or something similar and they just wait for the hacker to enter the chatroom and control them. As your router permits outgoing traffic, it will permit the infection to connect to the IRC-server.

If the infection gets the instruction to download a list of Email-adresses from somewhere (an FTP or WWW server) there's nothing stopping them. And if the instruction was to send all the email-adresses from that list an SPAM-email, you might end-up on an SPAM-blocklist.

Now, if you stick with Zone Alarm or any other desent firewall, you would've seen the infection as soon as it attempts to open a port or setup a connection to the IRC server.


PS: With 'desent firewall' I do not mean the crappy-firewall-wannabee-thing that Microsoft managed to squeese into Windows as it doesn't monitor the outgoing connections.
PPS: If you use your router, ensure you disable UPnP. Universal Plug and Play can be very usefull as Windows is able to setup portforwardings if it needs one. However if Windows can do it, applications and infections can do it as well!
0
A Cyber Security RX to Protect Your Organization

Join us on December 13th for a webinar to learn how medical providers can defend against malware with a cyber security "Rx" that supports a healthy technology adoption plan for every healthcare organization.

 
Dushan De SilvaCommented:
YES. I would recommend you to keep ZoneAlarm.

BR Dushan
0
 
x_X_x_X_xCommented:
Yes it would be best to keep the software firewall as well.....for all the reasons stated above.....Also sometimes routers have vulnerabilities and this would help if someone was able to get past the router.
0
 
StuartGriffenAuthor Commented:
Good info.  Thank you all.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now