Firewall Recommendations

[iisjman07]

For my clients I offer to install for them a 'security pack' which is basically an 'autoit' script that installs and updates avast home edition, keyscrambler, superantispyware, and enables the windows security center & firewall services. I'm looking to include with this a firewall of some sort, but I'm unsure which to choose. I know there are alot of free firewalls, but I need one that is VERY simple to use, because most of my clients won't have a clue! My first thought was comodo, but even with defense+ disabled you get an awful lot of popups. Anyone have any recommendations? If not then it doesn't really matter, seeing as most people have broadband, which requires a router, which usually have built in firewalls...

[greggh]

While Pyramid is correct that walling it off at the border is a lot better solution. In a lot of situations that isnt going to be possible, especially at residential customers.

We normally use comodo at this point. It used to be zonealarm.

[angry_geek]

For most residential customers, a sonicwall is unnecessary and too expensive. I hate software firewalls, but people just aren't going to spend $500 for their home network. I have run into occasions where customers have old computers that still work laying around in the closet somewhere. In this case, I offer to set up pfSense (http://www.pfsense.org/index.php?option=com_frontpage&Itemid=1) or m0n0wall (http://m0n0.ch/wall/) for $150 or so. For some customers with multiple computers in the house (especially with teenagers), this makes good sense.

[Larry Sabo]

I just use the XP firewall. Too many customers don't have a clue how to determine whether to allow or block attempts to connect to the internet and shoot themselves in the foot, blocking legitimate processes. I tell them, the most important thing is a good antivirus program that checks for updates every 4 hrs or so. If it's AntiVir Classic, I set up a schedule to do that. Let it decide whether or not whatever is trying to connect is malware.

In the few W9x case I see anymore, KPF 5.2 does the job, set to allow everything out without challenge.

[Cue]

I just use the XP firewall. Too many customers don't have a clue how to determine whether to allow or block attempts to connect to the internet and shoot themselves in the foot, blocking legitimate processes. I tell them, the most important thing is a good antivirus program that checks for updates every 4 hrs or so. If it's AntiVir Classic, I set up a schedule to do that. Let it decide whether or not whatever is trying to connect is malware.

In the few W9x case I see anymore, KPF 5.2 does the job, set to allow everything out without challenge.

I completely agree.
More so I feel that firewalls behind a router in a home network are practically useless.

The router blocks incoming traffic, and like Larry sad, 99% of the users that come to us to get computer repair will not know the first thing about what a firewall is or what the firewall thingy is bugging them about.

However, the name Firewall is cool and sells.
"you are protected by a FIREWALL"...

[TechProsSD]

However, the name Firewall is cool and sells.
"you are protected by a FIREWALL"...

hahaha!




personally, i try to stay away from firewalls - just too confusing for the end user


and.. the windows firewall is only HALF a firewall anyway (only watches one direction - inbound)

one of the first things i do is turn it off - i tell them their router is basically a firewall (keeps teh hackers out) and i explain NAT in simple terms for them



i'll resort to a firewall if somehow they keep getting re-infected

i'll give them extra training on how to use the allow/block - how to identify when its a bad-guy or a good-guy


but i explain its no fun, i dont' like to recommend it to my clients, its extra work on them, and they're going to have to learn a little bit to make it effective - but if that's what their situation calls for... it is what it is



now, *mostly* we don't need firewalls and in my experience ppl get along just fine without them

[rusty.nells]

...one of the first things i do is turn it off - i tell them their router is basically a firewall (keeps teh hackers out) and i explain NAT in simple terms for them...

Roaming laptops need a software firewall.

[TechProsSD]

Roaming laptops need a software firewall.

mm... okay

and those end users NEED education on how to use it



as long as that's in place, ok - otherwise, the default behavior will be to just "allow everything"