Re: Zone Alarm & Wireless Access Point Security

On Sat, 11 Feb 2006 15:04:42 -0800, Kerodo <loopback@localhost.com>
wrote:

>In article <fhpsu1t5i4jvupnkkd4mjiono98t68lfc1@4ax.com>,
>nospam@nospam.com says...
>>
>>
>> While conversing in this thread, I have found numerous sources that
>> appear to be knowledgeable that claim that the so-called personal
>> firewalls are indeed a waste of time and money. Some claim that they
>> actually make a system more vulnerable. They might be right.
>>
>> But I also found just as many people writing that software firewalls,
>> such as Zone Alarm, are useful and valuable applications. They might
>> be right too.
>>
>> While Volker suggested that the Windows XP firewall was the right one
>> to use, this firewall consistently gets some of the worst reviews on
>> the web from both its users and the people in the industry who test
>> these applications.
>>
>> Even though Volker says that outbound checking is not needed, the
>> word is that the new MS firewall will indeed check for outbound
>> connections.
>>
>
>I think that Volker and a few others take an idealogical stance and more
>or less insist that it's up to the user to keep the nasties off their
>system to begin with. I pretty much agree with this approach. I also
>think that Volker is just saying that a 'personal firewall' is not
>guaranteed to stop everything outbound, and that it's possible to bypass
>them, and that a 'personal firewall' does not ensure 'security'. (Sorry
>Volker, I don't mean to try to speak for you.. I may have it wrong.. :))
>
>I would agree with you a little and say that perhaps there are times
>when an alert to something bad going on might be useful. But I do
>believe in preventing things before they happen rather than trying to
>clean up the mess after the fact.

 I am always cautious with the advice given by people who take an
almost religious zeal in their position. Volker might be right for all
I know. I certainly agree that the best advice is to keep the malware
off your system in the first place. But even the best network security
hardware and talent does not seem to be able to do that.

 It is not likely that Volker can identify any system of hardware and
software that can eliminate all threats. But just because a software
Firewall is not perfect, it can still be very effective. My guess is
that MS agrees with me because they will include a firewall with all
future operating systems.

 We have a three-story home with computers on each floor. Some of them
are hardwired to the router, others use wireless connections through a
WAP. They are used by my wife, my nephew niece, and often by their
friends. To keep an eye on all of the machines at the same time would
just about physically impossible.

 I have been successful in getting everyone to notify me if any
unusual warning are sent by Zone Alarm or any of the anti-virus,
anti-malware programs. I just started requiring my nephew to allow me
to install any new software, mostly games, so that I can try to
eliminate any threats before they become an issue.

 For the most part we have been very successful. Once we were able to
identify his games as including spyware, we have been able to clean up
all of them.

 It used to amuse me that my wife's former employer, a technology
company with a great claim to network security prowess, was constantly
having its system infected with malware. The first time I decided to
clean up her laptop it had more infections than a Vietnamese
prostitute.

 Time will tell if Volker is right. Its just too bad that we all have
to spend so much time, effort, and money making sure that our
computers are safe from the creeps on the web.

 
Received on Mon May 1 00:50:15 2006