Re: ZoneAlarm loading last.

>
> I have read that you shouldn't run 2 firewalls at the same time but I
> use Sygate Personal Firewall along with Windows Firewall(WinXP Pro).
> What I haven't seen is the reason why I should turn off WF.
> I don't have a router and use my XP box as ICS.

I just like to have a border device in play such as a NAT router to protect
the O/S's services and shares and I will not do a direct connection of any
machine to the Internet with a PFW solution, unless I am forced to do so
with a laptop in a mobile situation.

I'll always use a NAT router for networking situations as a NAT router does
a better job of protecting the O/S's services and shares from outside
intrusion than software running at the machine level with the O/S, which
software running at the machine level can be taken down or attacked just
like the O/S by malware. Since the NAT router is a standalone device, it
cannot be taken down by malware exposing the machine of the entire network
to attack.

If you're in a networking situation, then most likely you're going to have
all the vulnerable services like MS F&P Sharing amongst other things active
on the machines, otherwise why network? The NAT router provides the better
protection, IMHO.

So, if it were me, I would use a NAT router and its protection and a PFW to
supplement behind the NAT router.

Some people run with two PFW(s) and if it's not giving you any problems
then do it. I run BlackIce and IPsec with IPsec supplementing BI on the
laptop, when the laptop is not connected to my network.

Duane :)



.

Relevant Pages

  • Re: ICS questions and confusion
    ... >>>It doesn't HAVE to be on a different subnet, ... but that requires that the ICS host become a bridge. ... >> ICS is a software based NAT router, and routers work best when the ... >> network already had the required address 192.168.0.1" is confusing. ...
    (microsoft.public.windowsxp.network_web)
  • Re: xkcd today- lovely.
    ... If you have a private network of computers behind a NAT router connected ... Their NAT router remembers details about the connection and translates ...
    (uk.comp.sys.mac)
  • Re: Cant login multiple computers from home...
    ... I meant the NAT router on your home network. ... I'm not using VPN pass-through or anything like that. ... > John Riddle wrote: ...
    (microsoft.public.win2000.ras_routing)
  • Re: What might cause connectivity to partially stop working?
    ... Network connectivity with this Solaris instance works normally, ... I can no longer access any other IP addresses on the 192.168.0 subnet except I can still connect to my NAT router, ... I *think*, but am not 100% sure that on some occasions, I've been able to get the network working after it fails by: ... ifconfig dnet0 down, then ...
    (comp.unix.solaris)
  • Re: xkcd today- lovely.
    ... If you have a private network of computers behind a NAT router connected ... Their NAT router remembers details about the connection and translates ...
    (uk.comp.sys.mac)