Netgear Router as only firewall device

[bpatters55]

I am running Norton Firewall and I also have a Netgear wireless access point from home. I have talked to several IT folks and I keep getting different answers. Is it necessary to have both a hardware and software running at the same time? Thanks, Bill

 

[biglebowski]

I have a similar setup and from what I can gather it's best to run both. The wireless router has a built in firewall that blocks everything try this link to test the firewall security it's very good

http://probe.hackerwatch.org/probe/probe.asp

Are you suggesting coconuts migrate?

 

[vop]

From a practical point of view, it is always best to have multiple lines of defense.

It is also a good idea to block undesirable incoming traffic in a device separate from any working computer. However, since a HW firewall is an incoming traffic cop by design, it is pretty much set-it-and-forget-it for that focus of concern. The highly desirable hiding of all your ports is generally more assured with a HW firewall.

A SW firewall is only as good as the user or users that interact with that tool. It is best at controlling outgoing traffic flows when configured properly.

There may be times when you need to disable a SW firewall to load some software. What happens if you forget to turn it back on? Some nasties can (or other people might) also potentially disable or turn off a SW firewall. At least with a HW firewall your incoming traffic is still in check regardless.

Vince
_____________________________________________________________
[*** If everyone is thinking alike, then somebody isn't thinking. ***]

 

[bpatters55]

Thanks folks. I was doing some work on my PC last night and Norton Alerted me to a Master of Paradise Trojan Horse. Norton must have read my post. ;-)

As I have learned, a hardware firewall is good for incoming traffic but does not protect from threats that originate on my PC and connect with a foreign, nasty host.

Lesson learned. I will keep both.

VOP, you do raise a good point though. I may be able to reconfigure the software firewall so that it monitors outgoing packets only and leave the incoming packet inspection to the hardware firewall. I could be wrong but it does not make sense to have both a hardware firewall and a software firewall examining incoming packets. That seems like duplication of effort to me.

 

[vop]

A duplication or redundancy factor is fine and doesn't hurt anything. If things are working as they should, your second line of defense will never need to be called upon.

Anyway and ultimately you will find that there will be very little (if any) suspect incoming traffic for your SW firewall to deal with when a properly functioning HW firewall is in place.

It is, however, a nice comforting, verifying reminder when the incoming traffic blockage count is almost non-existent (as it should be) with a properly functioning HW firewall.

Vince
_____________________________________________________________
[*** If everyone is thinking alike, then somebody isn't thinking. ***]