XRS

I run Zonealarm (not Pro) on my three XP Pro machines that connect to the internet via a Netgear DG814 router. I also run Sophos antivirus.

Because I'm having problems with VPN it has been suggested that I don't need Zonealarm.

Can it remove it and remain safe?

Jeff Wiltshire

It's a little like having a car without locks....will it get nicked, maybe/maybe not. Is it more likely to be nicked than a similair car with locks.....probable.

I'm surprised that someone is suggesting turning off your personel firewall so that you can use a VPN client.

dsmith

Given the NetGear has a firewall aswell (and also no doubt NATs the Lan with the XP machines on) I would have said a much better analogy would be like saying Zonealarm was like a krooklock. Its additional security on top of the existing locks (Netgear firewall).

Personally speaking I run a firewall on my router and AV on my machines. I wouldnt run a "personal" firewall unless the machines are connected directly to the Internet via dialup or adsl.

Deano

XRS

Helpful comments guys. I suppose I could always use XP's built-in firewall? As I understand it, the only thing Zonealarm does over and above this is prevent various programs accessing the internet, so as long as my AV software is up-to-date I should be alright?

dsmith

What your Netgear will do is keep the script kiddies 1 step away from your windows boxes. It will prevent incoming connections you dont want. Most firewalls of this type will however allow all *outbound* connections.

What zonealarm will do (Sorry I ahvent played with XP's fireall but I understand its similair) is allow you to control applications on your PC making unwanted outbound connections. (e.g. spyware reporting home).

IMHO it depends how careful you are about the S/W you install on your PCs as to whether you deem the second necessary. If I was installing plenty of freeware/shareware and pptp file sharing programs etc I would maybe start to use a personal f/w to control the activity. My Home PC is just however for browsing and for mail and being an ISDN only user I'm not into PTP file sharing.

I'm comfortable that I block all inbound connections and allow all outbound connections (which is how my firewall is configured)

Deano

bigsinky

belt and braces m8. i run a belkin router with NAT as well as Outpost Pro. I also have a trogan monitor and NAV 2003 running as well. do you think this is verging on the paranoid

you need this (well at least a firewall of sorts) if you have a permanent connection to the net.

cheers

big sinky

judgejules

"do you think this is verging on the paranoid"

Yes

~Jules - Smoothwall Corporate - lets be 'avin ya!

http://www.smoothwall.co.uk/

stevem2k

^^ what he said

(also smoothwall corp here)

Steve

dsmith

Ahhh but Jules - you go posting URLs to your connection all over dodgy mailing lists - so you need all the protection you can get

Deano

1603 with Firewall Feature Set here
Have forcibly installed an IPCop for my parents

bigsinky

jules

the corporate server looks nice, any freebies/beta copies going? just for testing purpose mind

cheers

big sinky

XRS

So if I keep Zonealarm running on j.r-xrs' machine 'cos he's into P2P stuff, MRSXRS and myself could rest easy without it 'cos we don't use that stuff?

stevem2k

BS . The corp server needs a licence key and 'rings home' to confirm setup.

There is a GPL version at www.smoothwall.org Features are much the same.


Steve

judgejules

"Ahhh but Jules - you go posting URLs to your connection all over dodgy mailing lists - so you need all the protection you can get

Deano"

Its only the people on the list that are dodgy

~Jules

Chris L

XRS

If you do have machines that are downloading stuff from KaZaA or similar programs, you should really consider installing Adaware and SpyBot - Spyware checkers that will help to keep your PC clean of lots of unwanted crap. Both are free.

Chris

XRS

Thanks for that Chris, I'll make sure j.r-xrs has them installed.

j.r-xrs

Have done, cheers Chris