what firewall to get?

hi everyone. i'm getting a computer soon and i need help in understanding the two types of firewall and what particular brand do you recommend. right now i just use the PC at work so i want to get a home PC. i plan to surf the web and emails mostly. so what firewall (hardware and/or software) do you recommend? should i get a hardware firewall? i know nothing of this but have a prefered interest. any info on this type is appreciated. thanks a bunch for your time and help. [img]smile.gif[/img]

[DJG]

www.sygate.com

I recommend this one. It's free, and it's good!

I reccomend a hardware based firewall such as a Linksys router....I used nortons Internet firewall and the router...the router made it so that Norton didn't have anything useful to do [img]smile.gif[/img]

Another little neat thing about the hardware option...no CPU cycles lost to the firewall...so Games are unaffected....speed wise.

[ 05-16-2003, 02:33 PM: Message edited by: MagiK ]

[andrewas]

For Dialup, a software firewall will be sufficient. For broadband, you can get away with software but a hardware firewall is recommended since the computer is connected to the internet longer and software firewalls can be beaten given time. (So can hardware come to that, but it takes a lot longer and unless you attract attention most hackers will have better things to do)

hmmm ... hardware firewall sounds good. any specs i should look for when buying? remember that i know nothing of hardware firewall so any details is a great help. also how are they set up? would i need to update it often like with software firewall.

[Sir Kenyth]

Linksys is the home network standard. I'm assuming you'll have a broadband connection, so you'll need one anyway. You can get Cisco if you want to spend a bundle ($400+ used). Computer installed firewalls are kind of a waste. Much better to simply disable the net interface when you're not using it or turn off the PC.

[Animal]

I use a Linksys BEFSX41 hardware router for my home/office network, along with Nortin Firewall loaded and running on every PC. You can't be too safe.

I'd look into a wireless router based upon 802.11g if I was buying new, but it depends on what your needs are. You'll also want to make sure that any router you buy is uPnP compatible for maximum compatibility with Microsoft.

[Night Stalker]

Originally posted by Animal: I use a Linksys BEFSX41 hardware router for my home/office network, along with Nortin Firewall loaded and running on every PC. You can't be too safe. I'd look into a wireless router based upon 802.11g if I was buying new, but it depends on what your needs are. You'll also want to make sure that any router you buy is uPnP compatible for maximum compatibility with Microsoft.

NOTE: A router is not a firewall. The consumer grade stuff like LinkSys does implement NAT (Network Address Translation), and limited connection rejection based on source ip/port. and is a first defense. But often they don't run a stateful packet filter, which is the basis for most decent firewall implementations.

Be wary of how you set up any wireless router. Most people configure for DHCP. While this is easy for network set up, this gives a HUGE whole for anyone with a wireless ethernet card to access your supposedly private LAN. If you run a wireless router, I strongly suggest that you become familiar with MAC filtering/authentication and WEP encryption.

You may not think you have anything worth stealing on your PC. But, if nothing else you have bandwidth - given away freely in your name.

The default config for a LinkSys wireless router is totaly insecure.

[Bungleau]

Originally posted by Night Stalker: If you run a wireless router, I strongly suggest that you become familiar with MAC filtering/authentication and WEP encryption. The default config for a LinkSys wireless router is totaly insecure.

I just started using WLAN tonight (Linksys BEFW11S4), and have configured WEP (128-bit). I looked at MAC Filtering briefly tonight, but have put it on the back burner. Any thoughts or highlights? Is it as simple as entering the wireless MAC address and saying "only him"?

I realize I need to RTFM, and plan on doing that, but your comment hit me at just the right time [img]smile.gif[/img]

TIA

*B*

[Skunk]

I agree that a hardware solution is always best - but it tends to cost significantly more and is not always suitable (ie for a laptop on the move).

Maybe this will help!
Firewall comparison chart