RE: Spam: Zonealarm+Windows Firewall

["Jeff Britton, Monitored Security" <jeff.britton () monitoredsecurity com>]

I really don't see much value added by running both firewalls on the same host.  In my experience, ZoneAlarm has done a 
great job monitoring both in and outbound traffic and should be sufficient (considering near-optimal management).  
Running a second firewall, such as the Windows Firewall, adds another layer of complexity, but not necessarily another 
layer of security.  I just don't see it being efficient, from both a performance perspective, as well as from a 
security perspective.

Jeff

-----Original Message-----
From: barcajax () gmail com [mailto:barcajax () gmail com]
Sent: Saturday, February 25, 2006 2:16 AM
To: security-basics () securityfocus com
Subject: Spam: Zonealarm+Windows Firewall


I have been using Zonealarm for many years. I've only started using Windows Firewall recently after upgrading my XP to 
SP2. I know that Windows Firewall only filters incoming packets (correct me if I'm wrong) thus I have kept my Zonealarm 
installed and running.
What is the implication of running both firewalls concurrently? Does Windows Firewall automatically take precedence 
over Zonealarm? Does this constitute a 2-tier firewall on my home PC?
I noticed that Windows Firewall does not notify me before dynamically adding new rules to allow traffic through. This 
concerns me greatly and I am contemplating turning Windows Firewall off and relying on Zonealarm. Any comments?

---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Tailor your education to your own professional goals with degree 
customizations including Emergency Management, Business Continuity Planning, 
Computer Emergency Response Teams, and Digital Investigations. 

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------