Full Disclosure mailing list archives

Re: PC Firewall Choices


From: John LaCour <johnlacour () gmail com>
Date: Wed, 18 Jan 2006 17:09:53 -0800

On 1/17/06, Valdis.Kletnieks () vt edu <Valdis.Kletnieks () vt edu> wrote:

Even more important, a hardware firewall can't be compromised as easily
by malware that's on a host behind the firewall.  It's easy for a program
on a PC to tell ZA to look the other way.  ...

Not all security software is equal.  ZA actually does a very good job
of protecting
itself from tampering compared with the vast majority of AV/AS/FW software.

A hardware firewall has no knowledge of the application involved which is
another dimension to policy that a desktop firewall gives you control over
which a hardware firewall does not.

Personally, I advocate using both.

-John
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: