Norton AntiVirus vs. Windows Firewall
-
I'm not a huge fan of Norton products. Norton products should not be used in the same sentence with optimal performance. I think Zone Alarm Security Suite is rock solid though but none of this answers your question. Windows XP firewall is a very limited firewall and it's mediocre at best. With both of them running your traffic gets scanned twice. Not a bad security blanket but it will slow things down whether you can tell a difference is arguable. Try shutting it off. If you don't want to see the Windows nags then turn off the ICS Firewall Service in the services. Norton's firewall should be all you need. Turn of XP and see if you can tell a difference. If you cannot turn it back on. - Rex
My name is Maximus Decimus Meridius, commander of the Armies of the North, General of the Felix Legions, loyal servant to the true emperor, Marcus Aurelius. Father to a murdered son, husband to a murdered wife. And I will finish this project, in this life or the next. Slightly modified " from Gladiator. Code-frog System Architects, Inc.
Ta for the information. Trying ZA now. The less Norton I can use the better. regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
-
Thanks Ravi, I am downloading ZA now and will give it a bash. I don't particularly like Norton but it is what came with my PC and I am too cheap to buy anything else. regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
-
After about the tenth reinstall of Norton AntiVirus 2005 I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. I haven't noticed any problems having them both running but it would be nice to have that "optimal performance." Anyone know if IWP is decent or whether I should disable it and rely on Windows Firewall? (And no I don't have nor am I going to go and buy a hardware firewall. Thanks.) regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
Paul Watson wrote: I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. It's like your lawyer telling you "don't talk to her directly, every communication goes through me" :rolleyes: [edit]Ah damn, I really wanted to recommend a hardware firewall...[/edit] So, ZoneAlarm is fine. You are not running into any problems with NAV? I never tried it, but there are many people having problems with it, esp. on developer boxes.
Pandoras Gift #44: Hope. The one that keeps you on suffering.
aber.. "Wie gesagt, der Scheiss is' Therapie"
boost your code || Fold With Us! || sighist | doxygen -
Ta for the information. Trying ZA now. The less Norton I can use the better. regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
IMHO NOrton has not released anything worth looking at since the days fo good old Norton Commander. I would not touch thier stuff since with a 10 foot pole. I use AVAST for AV and rely on my good old Netgear router and MS ISA for my firewalls. I tried Zonealrm a while back but found it's constatnt asking about what traffic to allow a bit too much.
George Carlin wrote: "Don't sweat the petty things, and don't pet the sweaty things." Jörgen Sigvardsson wrote: If the physicists find a universal theory describing the laws of universe, I'm sure the asshole constant will be an integral part of that theory.
My Blog[^]
-
Ravi Bhavnani wrote: Like me, you favor "cost optimization". The usual euphemism is "cost savy" :)
My programming blahblahblah blog. If you ever find anything useful here, please let me know to remove it.
-
Ravi Bhavnani wrote: Like me, you favor "cost optimization". The usual euphemism is "cost savy" :)
My programming blahblahblah blog. If you ever find anything useful here, please let me know to remove it.
-
Paul, AFAIK Windows firewall only monitors incoming traffic. For optimal security, your firewall should monitor traffic in both directions. The free version of ZoneAlarm :cool: works admirably for me. I use it instead of Windows firewall. /ravi My new year's resolution: 2048 x 1536 Home | Music | Articles | Freeware | Trips ravib(at)ravib(dot)com
Admirably, ZoneAlarm also seems to hide your MAC (?) address from sites, whereas Norton does not. David
-
IMHO NOrton has not released anything worth looking at since the days fo good old Norton Commander. I would not touch thier stuff since with a 10 foot pole. I use AVAST for AV and rely on my good old Netgear router and MS ISA for my firewalls. I tried Zonealrm a while back but found it's constatnt asking about what traffic to allow a bit too much.
George Carlin wrote: "Don't sweat the petty things, and don't pet the sweaty things." Jörgen Sigvardsson wrote: If the physicists find a universal theory describing the laws of universe, I'm sure the asshole constant will be an integral part of that theory.
My Blog[^]
It has gotten a lot better recently. You should give it a try. Yes the first few days are annoying but after that it's a pretty simple ship to pilot. - Rex
My name is Maximus Decimus Meridius, commander of the Armies of the North, General of the Felix Legions, loyal servant to the true emperor, Marcus Aurelius. Father to a murdered son, husband to a murdered wife. And I will finish this project, in this life or the next. Slightly modified " from Gladiator. Code-frog System Architects, Inc.
-
After about the tenth reinstall of Norton AntiVirus 2005 I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. I haven't noticed any problems having them both running but it would be nice to have that "optimal performance." Anyone know if IWP is decent or whether I should disable it and rely on Windows Firewall? (And no I don't have nor am I going to go and buy a hardware firewall. Thanks.) regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
I use Sygate personal firewall (free). No see-you, no heal-you. Ptthh.;P - Der Dokter
-
After about the tenth reinstall of Norton AntiVirus 2005 I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. I haven't noticed any problems having them both running but it would be nice to have that "optimal performance." Anyone know if IWP is decent or whether I should disable it and rely on Windows Firewall? (And no I don't have nor am I going to go and buy a hardware firewall. Thanks.) regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
I need to keep the Norton Internet Worm Protection off. It was always crashing and causing problems. I wish I could go back to 2004. 2005 was so unstable the first six months or so. I have a hardware firewall so I'm covered. I have used Zone Alarm and it was very nice. I just got tired of using software firewalls.
-
After about the tenth reinstall of Norton AntiVirus 2005 I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. I haven't noticed any problems having them both running but it would be nice to have that "optimal performance." Anyone know if IWP is decent or whether I should disable it and rely on Windows Firewall? (And no I don't have nor am I going to go and buy a hardware firewall. Thanks.) regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
I would NEVER NEVER trust a antivirus application to do the job of a firewall. Simply not the same task. Like Ravi, I have Zonealarm at home. The purchased version on my box and the free on my kids systems (at universities). One issue is with my sons, installing versin 6 broke his ability to connect up to the his mail server. Took it off and put 5.5 back on and all was fine. No problem with my box and 6. Just a note to remember. I stopped using NAV on my home box and installed the Free Home AVG version. Seams ok but at least on the full system scans it is slower than NAV. Why never a hardware firewall? I have seen some for under $50 US. Now teh cheap ones at least only protect you from the outside getting in, not the inside getting out. Which is why you still want a software version. IMhO I do not mind getting old. It beats all the other options that I can think of.
-
I would NEVER NEVER trust a antivirus application to do the job of a firewall. Simply not the same task. Like Ravi, I have Zonealarm at home. The purchased version on my box and the free on my kids systems (at universities). One issue is with my sons, installing versin 6 broke his ability to connect up to the his mail server. Took it off and put 5.5 back on and all was fine. No problem with my box and 6. Just a note to remember. I stopped using NAV on my home box and installed the Free Home AVG version. Seams ok but at least on the full system scans it is slower than NAV. Why never a hardware firewall? I have seen some for under $50 US. Now teh cheap ones at least only protect you from the outside getting in, not the inside getting out. Which is why you still want a software version. IMhO I do not mind getting old. It beats all the other options that I can think of.
I am trying ZoneAlarm Security Suite 6.0 out now, replaced Norton AV. It is anti-virus and firewall so I guess I can trust it this time ;) Thanks. regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
-
After about the tenth reinstall of Norton AntiVirus 2005 I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. I haven't noticed any problems having them both running but it would be nice to have that "optimal performance." Anyone know if IWP is decent or whether I should disable it and rely on Windows Firewall? (And no I don't have nor am I going to go and buy a hardware firewall. Thanks.) regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
Hardware firewalls are critical to be perfectly honest and not the cheap ones though they are better than nothing. You really need a gateway inspection point as a first stop. A hardware firewall should provide deep packet inspection, gateway anti-virus and intrusion prevention services. Intrusion prevention means that unless you explicitly allow it Windows XP Remote Desktop connection requests are going to be blocked, Google web-bots will be blocked, etc... Your hardware firewall is your first sanity check. Next, if you run a mail server you need proper software to do scanning and inspecting on it. That's a no brainer. Lastly, a software firewall running locally on the client is a *super* must. You need to know what is going in and out of your box and you really should be asked often if you wish to allow things. There are a lot of programs I just block and that's that. Is this an over-kill configuration? Once upon a time yes it very much was. Anymore I'm not at all convinced it's a bad thing. That's why I run it at home. I use a TZ-170 and a Wireless TZ-170 both by SonicWALL as my hardware checkpoints. JUST TOTALLY AWESOME PRODUCTS!!! Then I run open source AV software on my mail server. All my clients run ZASS 6.0 and I've never had a single intrusion and because I run servers and all sorts of traffic in and out I get banged on all day long with some pretty sophisticated attacks all reported by my TZ's of course. - Rex
My name is Maximus Decimus Meridius, commander of the Armies of the North, General of the Felix Legions, loyal servant to the true emperor, Marcus Aurelius. Father to a murdered son, husband to a murdered wife. And I will finish this project, in this life or the next. Slightly modified " from Gladiator. Code-frog System Architects, Inc.
-
Hardware firewalls are critical to be perfectly honest and not the cheap ones though they are better than nothing. You really need a gateway inspection point as a first stop. A hardware firewall should provide deep packet inspection, gateway anti-virus and intrusion prevention services. Intrusion prevention means that unless you explicitly allow it Windows XP Remote Desktop connection requests are going to be blocked, Google web-bots will be blocked, etc... Your hardware firewall is your first sanity check. Next, if you run a mail server you need proper software to do scanning and inspecting on it. That's a no brainer. Lastly, a software firewall running locally on the client is a *super* must. You need to know what is going in and out of your box and you really should be asked often if you wish to allow things. There are a lot of programs I just block and that's that. Is this an over-kill configuration? Once upon a time yes it very much was. Anymore I'm not at all convinced it's a bad thing. That's why I run it at home. I use a TZ-170 and a Wireless TZ-170 both by SonicWALL as my hardware checkpoints. JUST TOTALLY AWESOME PRODUCTS!!! Then I run open source AV software on my mail server. All my clients run ZASS 6.0 and I've never had a single intrusion and because I run servers and all sorts of traffic in and out I get banged on all day long with some pretty sophisticated attacks all reported by my TZ's of course. - Rex
My name is Maximus Decimus Meridius, commander of the Armies of the North, General of the Felix Legions, loyal servant to the true emperor, Marcus Aurelius. Father to a murdered son, husband to a murdered wife. And I will finish this project, in this life or the next. Slightly modified " from Gladiator. Code-frog System Architects, Inc.
Hey Rex, I ment to ask you this but just forgot. I am going to be ordering the TZ-170 wireless this week sometime. I have an internal wireless card on my laptop but my wife does not. What kind of wireless nic card can I use to connect to the firewall? Thanks!
We shouldn't assume something's debugged just because everyone in the whole world has access to the source code.
-
After about the tenth reinstall of Norton AntiVirus 2005 I noticed for the first time a little message that said for optimal performance I should disable Windows Firewall (on Windows XP SP2) and leave that job up to Norton AntiVirus 2005's Internet Worm Protection service. I haven't noticed any problems having them both running but it would be nice to have that "optimal performance." Anyone know if IWP is decent or whether I should disable it and rely on Windows Firewall? (And no I don't have nor am I going to go and buy a hardware firewall. Thanks.) regards, Paul Watson South Africa Colib and WebTwoZero. K(arl) wrote: oh, and BTW, CHRISTIAN ISN'T A PARADOX, HE IS A TASMANIAN!
Paul Watson wrote: no I don't have nor am I going to go and buy a hardware firewall. Why on earth not? They are dirt cheap and don't suck one bit of performance from your system like the all the crappy software ones do. I think you have exactly the wrong attitude on this one sorry, but I've tried everything and no software in the world can possibly be as good as a cheap USD$50.00 hardware firewall.
"A preoccupation with the next world pretty clearly signals an inability to cope credibly with this one."
-
Hey Rex, I ment to ask you this but just forgot. I am going to be ordering the TZ-170 wireless this week sometime. I have an internal wireless card on my laptop but my wife does not. What kind of wireless nic card can I use to connect to the firewall? Thanks!
We shouldn't assume something's debugged just because everyone in the whole world has access to the source code.
It supports B/G without any trouble so you can take your pick. I recommend Orinoco or pick up one of the SonicWALL long range wireless cards (made by Orinoco) when you get the 170. They might be running a promo where you get one free when you order I cannot remember. The SonicWALL's are the longest range card I've used without additional amplification they work really well. Boy listening to me you'd think I made money from these guys but I don't at all. I don't get one red cent. Maybe I should ask for it though! :sigh: I'm always doing stuff for free that I could charge for. I must be stupid.:doh: Oh well... So yeah any brand card will work fine whether SonicWALL or Linksys it's all the same. One thing I would do is pick a card then do a lot of google and make sure there's no conflicts with that card and the laptop. Most people don't do that and suddenly there laptop is GPF'ing and they don't know why. - Rex
My name is Maximus Decimus Meridius, commander of the Armies of the North, General of the Felix Legions, loyal servant to the true emperor, Marcus Aurelius. Father to a murdered son, husband to a murdered wife. And I will finish this project, in this life or the next. Slightly modified " from Gladiator. Code-frog System Architects, Inc.