Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista PC
in view of its built in "Internet Security'?

If you feel that I should install Zone Alarm, should I disable the VISTA
security program in any way?

Thanks

"Sitara Lal" <lalsitara@filter.indiatimes.com> wrote in message
news:%23BcgvlGZIHA.504@TK2MSFTNGP02.phx.gbl...[color=blue]
> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista
> PC in view of its built in "Internet Security'?
>
> If you feel that I should install Zone Alarm, should I disable the VISTA
> security program in any way?
>
> Thanks[/color]

You should never have two firewalls running at the same time. Pick one or
the other. Although Vista offers inbound AND outbound protection now (it
didn't in XP) some feel it's outbound protection is lacking. So I would
advise Zone Alarm. (I use Zone Alarm security suite)

"Sitara Lal" wrote:
[color=blue]
> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista PC
> in view of its built in "Internet Security'?
>
> If you feel that I should install Zone Alarm, should I disable the VISTA
> security program in any way?
>[/color]

Sitara Lal,

You can create conflicts if you run more than one firewall at the same
time. I honestly feel that the Windows firewall is sufficient but I choose to
use Comodo firewall, which is free.

I would not use the ZoneAlarm firewall. I have determined, based upon
personal experience, that the ZoneAlarm firewall is incompatible with Vista,
regardless of what ZoneAlarm says to the contrary.

Have a nice day.

C.B.[color=blue]
> Thanks
>
>
>[/color]

"CB" <CB@discussions.microsoft.com> wrote in message
news:B0DAE109-9863-47B0-A0F7-C7F2CA49F4FD@microsoft.com...[color=blue]
>
>
> "Sitara Lal" wrote:
>[color=green]
>> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista
>> PC
>> in view of its built in "Internet Security'?
>>
>> If you feel that I should install Zone Alarm, should I disable the VISTA
>> security program in any way?
>>[/color]
>
> Sitara Lal,
>
> You can create conflicts if you run more than one firewall at the same
> time. I honestly feel that the Windows firewall is sufficient but I choose
> to
> use Comodo firewall, which is free.
>
> I would not use the ZoneAlarm firewall. I have determined, based upon
> personal experience, that the ZoneAlarm firewall is incompatible with
> Vista,
> regardless of what ZoneAlarm says to the contrary.
>
> Have a nice day.
>
> C.B.[color=green]
>> Thanks[/color][/color]

It's not just the folks at Zone Alarm saying that...*I* use Zone Alarm and
it works just fine, so my personal experience is different than yours I
guess.[color=blue][color=green]
>>
>>
>>[/color][/color]

"Just.some.guy" <return.email@address.not.valid.com> wrote in message
news:MLuoj.11096$O9.5121@trnddc01...[color=blue]
>
> "CB" <CB@discussions.microsoft.com> wrote in message
> news:B0DAE109-9863-47B0-A0F7-C7F2CA49F4FD@microsoft.com...[color=green]
>>
>>
>> "Sitara Lal" wrote:
>>[color=darkred]
>>> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a
>>> Vista PC
>>> in view of its built in "Internet Security'?
>>>
>>> If you feel that I should install Zone Alarm, should I disable the VISTA
>>> security program in any way?
>>>[/color]
>>
>> Sitara Lal,
>>
>> You can create conflicts if you run more than one firewall at the
>> same
>> time. I honestly feel that the Windows firewall is sufficient but I
>> choose to
>> use Comodo firewall, which is free.
>>
>> I would not use the ZoneAlarm firewall. I have determined, based upon
>> personal experience, that the ZoneAlarm firewall is incompatible with
>> Vista,
>> regardless of what ZoneAlarm says to the contrary.
>>
>> Have a nice day.
>>
>> C.B.[color=darkred]
>>> Thanks[/color][/color]
>
> It's not just the folks at Zone Alarm saying that...*I* use Zone Alarm and
> it works just fine, so my personal experience is different than yours I
> guess.[/color]

I use ZoneAlarm and it also works fine for me. But I would like to take it
off and experiment with another firewall. My experience with uninstalling
ZoneAlarm leads me to recommend against installing it. I will never install
it again.

Sitara Lal wrote:[color=blue]
> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista PC
> in view of its built in "Internet Security'?
>
> If you feel that I should install Zone Alarm, should I disable the VISTA
> security program in any way?
>
> Thanks
>
>[/color]


My position is that running two or more software firewalls
simultaneously is generally unnecessary and can _sometimes_ cause
conflicts, potentially negating the protection of both. Even ig there
is no conflict, having two firewalls running simultaneously is most
certainly an unnecessary drain on system resources, without providing
any additional benefit.

As it is, Vista's built-in firewall solution is more than
adequate for most consumers' needs. While it's not quite up to the
ease-of-use standards of Kerio or ZoneAlarm, it has been noticeably
improved over WinXP's version.

There are two interfaces for Vistas built-in firewall:

1) A simplified one accessed through the Control Panel that is the only
one most people see. To further supplement this view, Sphinx's Vista
Firewall Control [url]http://sphinx-soft.com/Vista/[/url]) is a piece of freeware
that makes the Vista Firewall much more useful to the average user.

2) And the more advanced "Windows Firewall with Advanced Security
(WF.msc), accessed via the Start Menu's Administrative Tools folder, for
the experienced user who wants more granular control.


--

Bruce Chambers

Help us help you:
[url]http://www.catb.org/~esr/faqs/smart-questions.html[/url]

[url]http://support.microsoft.com/default.aspx/kb/555375[/url]

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

>> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista[color=blue][color=green]
>> PC[/color][/color]
in view of its built in "Internet Security'?
If you feel that I should install Zone Alarm, should I disable the VISTA
security program in any way?


S Lai:

I run ZA free along with Vista's f/w.
ZA provides easier outbound control than Vista's f/w.

> You should never have two firewalls running at the same time.

Why? Have you had problems doing it?

I have run two f/ws together for years w/o problems

On Thu, 31 Jan 2008 16:28:49 -0800, Sitara Lal wrote:
[color=blue]
> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista PC
> in view of its built in "Internet Security'?
>
> If you feel that I should install Zone Alarm,[/color]

No, do not proceed with installing ZA!!!
[color=blue]
> should I disable the VISTA security program in any way?[/color]

No, you are not going to find anything better than the Vista FW and Vista
in itself due to the advanced features the FW and Vista are using.

"Personal Firewalls" are mostly snake-oil.
[url]http://www.samspade.org/d/firewalls.html[/url]

Jesper's Blogs-
At Least This Snake Oil Is Free.
[url]http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx[/url]
Windows Firewall: the best new security feature in Vista?
[url]http://blogs.technet.com/jesper_johansson/archive/2006/05/01/426921.aspx[/url]

Exploring The Windows Firewall.
[url]http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx[/url]
"If you try to block outbound connections from a computer that’s already
compromised, how can you be sure that the computer is really doing what you
ask? The answer: you can’t. Outbound protection is security theater—it’s a
gimmick that only gives the impression of improving your security without
doing anything that actually does improve your security. This is why
outbound protection didn’t exist in the Windows XP firewall and why it
doesn’t exist in the Windows Vista™ firewall."

Vista Firewall Control.
Protects your applications from undesirable network incoming and outgoing
activity, controls applications internet access.
[url]http://sphinx-soft.com/Vista/[/url]

"CZ" <CZ@no99spam.com> wrote in message
news:%23Y0jr1IZIHA.5348@TK2MSFTNGP03.phx.gbl...[color=blue][color=green]
>> You should never have two firewalls running at the same time.[/color]
>
> Why? Have you had problems doing it?
>
> I have run two f/ws together for years w/o problems[/color]

I've always been told that you add no extra protection by doing that, and
you open yourself up for software conflicts. That's probably why some
firewalls will actually try to turn windows firewalls *off** when you
install them.

> "CZ" <CZ@no99spam.com> wrote in message[color=blue]
> news:%23Y0jr1IZIHA.5348@TK2MSFTNGP03.phx.gbl...[color=green][color=darkred]
>>> You should never have two firewalls running at the same time.[/color]
>>
>> Why? Have you had problems doing it?
>>
>> I have run two f/ws together for years w/o problems[/color]
>
> I've always been told that you add no extra protection by doing that,
> and you open yourself up for software conflicts. That's probably why
> some firewalls will actually try to turn windows firewalls *off**
> when you install them.[/color]

And, it's wasting machine time by looking at everything twice. But I've
no idea how robust Vista's FW is or isn't. I'd say use the one that
feels the most useful and friendly to you over the long term.

--
Twayne

Tired of MS Office and their shananigans?
Try this free replacement:
[url]http://www.openoffice.org[/url]

"Just.some.guy" <return.email@address.not.valid.com> wrote in message
news:2gCoj.2114$4f.1362@trndny08...[color=blue]
>
> "CZ" <CZ@no99spam.com> wrote in message
> news:%23Y0jr1IZIHA.5348@TK2MSFTNGP03.phx.gbl...[color=green][color=darkred]
>>> You should never have two firewalls running at the same time.[/color]
>>
>> Why? Have you had problems doing it?
>>
>> I have run two f/ws together for years w/o problems[/color]
>
> I've always been told that you add no extra protection by doing that, and
> you open yourself up for software conflicts. That's probably why some
> firewalls will actually try to turn windows firewalls *off** when you
> install them.
>[/color]


The only thing that's really going to happen is that you might create a
double FW situation where packets/traffic that should come through the FW if
either one is being used individually is being blocked, because both are
being used.

I do use two packet filters, when my laptop has a direct connection to the
Internet. Vista FW or some 3rd party personal firewall are not firewalls.
They are packet filters. I use Vista's packet filter, and I also use IPSec
another packet filter that's on Vista to supplement Vista's FW/packet
filter.

[url]http://www.petri.co.il/block_ping_traffic_with_ipsec.htm[/url]

I hue the AnalogX IPsec rules, which I have made my adjustments to the
policies

[url]http://www.analogx.com/CONTENTS/articles/ipsec.htm[/url]
[url]http://support.microsoft.com/kb/813878[/url]

On Thu, 31 Jan 2008 16:28:49 -0800, "Sitara Lal"
<lalsitara@filter.indiatimes.com> wrote:
[color=blue]
> Is it redundant to use a standalone Firewall (e.g. Zone Alarm) on a Vista PC
> in view of its built in "Internet Security'?
>
> If you feel that I should install Zone Alarm, should I disable the VISTA
> security program in any way?[/color]


You should run only one firewall program. Choose either Vista's or ZA,
whichever you prefer, not both.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

On Thu, 31 Jan 2008 20:46:34 -0800, "CZ" <CZ@no99spam.com> wrote:
[color=blue][color=green]
> > You should never have two firewalls running at the same time.[/color]
>
> Why? Have you had problems doing it?[/color]


Three reasons:

1. You achieve no extra protection,
2. you incur the extra overhead of running two firewalls,
3. and you run the risk (probably small, but not zero) of conflicts
between them.

See [url]http://www.microsoft.com/athome/security/protect/firewall.mspx[/url]
which includes the following (talking about XP, but it's the same in
Vista):

"Q. Should I use both the built-in firewall and a software firewall
from a different company on my Windows XP computer?

"A. No. Running multiple software firewalls is unnecessary for typical
home computers, home networking, and small-business networking
scenarios. Using two firewalls on the same connection could cause
issues with connectivity to the Internet or other unexpected behavior.
One firewall, whether it is the Windows XP Internet Connection
Firewall or a different software firewall, can provide substantial
protection for your computer."

[color=blue]
> I have run two f/ws together for years w/o problems[/color]


As I said, the risk of conflicts is probably small, but it's not zero.
If you haven't had a problem, consider yourself lucky. In my view,
it's pointless to run any risk for no benefit.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

> > You should never have two firewalls running at the same time.[color=blue]
>
> Why? Have you had problems doing it?[/color]

Three reasons:
1. You achieve no extra protection,
2. you incur the extra overhead of running two firewalls,
3. and you run the risk (probably small, but not zero) of conflicts
between them.
See [url]http://www.microsoft.com/athome/security/protect/firewall.mspx[/url]



Ken:

You and I discussed this in the XP NG several years ago (along with Alex).

[color=blue]
> 1. You achieve no extra protection,[/color]

Wrong. If two f/ws use different f/w technologies, there can be a benefit.
I use Vista's f/w for packet filtering at OSI levels 3 & 4, and ZA free for
application control at OSI level 7. There should not be a problem as they
work at different OSI levels.
[color=blue]
> 2. you incur the extra overhead of running two firewalls,[/color]

That has never been an issue in several years of using ZA free as a second
f/w in XP and then in Vista.
[color=blue]
> 3. and you run the risk (probably small, but not zero) of conflicts
> between them.[/color]

True, but it has never been a problem in my experience.
[color=blue]
> See [url]http://www.microsoft.com/athome/security/protect/firewall.mspx[/url][/color]

MS attitude is self-serving.