Use a firewall for your personal computer

Use a firewall

Firewalls keep out some viruses and hackers

A firewall acts as a barrier between the public internet and your private computer or network and blocks threats including some viruses.

Why install a firewall?

A firewall protects you against a number of different online threats:

• Hackers breaking into your computer.
• Some viruses, called “worms,” that spread from computer to computer over the internet.
• Some firewalls block outgoing traffic that might originate from a virus infection.

What a firewall does

Because the internet is a public network, any connected computer can find and connect to any other connected computer. A firewall is a barrier between the public internet and your private computer system.

Think of it as a really paranoid bouncer who stops anyone coming into your computer if they’re not on the guest list.

What a firewall does NOT do

A firewall isn’t sufficient on its own to guarantee security, but it is the first line of defence.

You also need to take the other protective steps outlined on this website.

However, a firewall provides limited or no protection:

• If you give permission for other computers to connect to yours.
• If it is switched off, disabled or contains many exceptions or open ports.
• Against most viruses.
• Against spam.
• Against spyware installations.
• Against any kind of fraud or criminal activity online.
• If you or a virus has created a back door through the firewall.
• If a hacker has the password for the firewall.
• Against people with physical access to your computer or network.
• Against malicious traffic that does not travel through it, for example via a poorly configured wireless network.
• Against attacks after a network has been compromised.
• Against traffic that appears to be legitimate.

None of these things give a reason NOT to install a firewall, however. It’s like wearing a seatbelt in a car: it’s a good idea but it won’t guarantee your safety if you crash.

It is safest to assume that your internet service provider does NOT provide any kind of firewall and make sure you have the right software to protect yourself.

Types of firewall

Desktop firewall

A desktop firewall is installed on each computer that is connected to the internet and monitors (and blocks, where necessary) internet traffic. They are also sometimes known as ‘software firewalls.’

Windows Firewall (part of Microsoft Windows XP Service Pack 2) is a basic firewall. You can replace it with a more sophisticated commercial desktop firewall or supplement it with a hardware firewall if you wish.

The benefits of a desktop firewall are:

• Windows Firewall is free and built-in to Windows XP and free commercial firewalls are available for older systems in private use.
• Commercial desktop firewalls often integrate well with other security products like virus scanners.
• Easy to set up – no wiring or extra hardware.
• If you use a laptop, a desktop firewall will protect you wherever you connect to the internet.

We recommend that every computer should have a software firewall installed.

Hardware firewall

Hardware firewalls are often built into broadband internet routers. If several computers share an internet connection, a hardware firewall will protect all of them. Most router manufacturers offer devices with firewalls.

Although they are getting easier to use, configuring a hardware firewall is often trickier than configuring a software firewall. Most internet routers and firewalls have a password that lets you control them from your computer. It's a good idea to change that password so that it is not the default one.

There is usually little price difference between a router that includes a firewall and one without and so it pays to get the extra protection if you have a choice.

You can have hardware and desktop firewalls and having both may give a small margin of extra security. However, a desktop firewall on each computer is your first priority.

How to install a desktop firewall

Your choice of desktop firewall depends on whether or not you are running Windows XP and whether or not you want to buy a commercial firewall.

Windows XP Service Pack 2

Windows XP Service Pack 2 includes Windows Firewall, which is a desktop firewall. You can check if you are running this version of Windows by opening the Control Panel and double-clicking on System. When the System control panel appears, under the word “System” it will tell you what operating system you are running. If it reads “Microsoft Windows XP” and “Service Pack 2” there, you’re all set.

You can check if your firewall is operational by opening the Control Panel and double-clicking on Security Centre. A green light and the word ‘on’ should appear next to Firewall.

Windows XP

See Get the latest Windows updates for instructions on upgrading to Windows XP Service Pack 2.

Windows 95, 98, ME, 2000

See: Using older computers online safely.

Commercial firewalls

Commercial firewalls operate in the same way as Windows Firewall but generally give you extra control over how the firewall works, more information about how to configure it and more support.

Most security software companies sell a firewall as a standalone software package or as part of a security suite that includes other protection such as a virus scanner.

In addition, the basic version of Zone Labs ZoneAlarm is free for personal use.

How to test if your firewall is working

There are a couple of online sites that you can use to see if your firewall is protecting your computer:

• Symantec Security Check.
• ShieldsUP! (follow the links for ‘Shields Up’). This site requires a little more technical knowledge to use properly.

How to configure a firewall

Most desktop firewalls require some training before they are fully configured. This is because they need to learn what programs you use and which ones connect to the internet.

Windows Firewall pops up warnings when a program tries to connect to the internet for the first time.

Other desktop firewalls work in a similar way but the information they give varies from product to product.

The key thing is to pay attention to these messages and make sure that you only allow legitimate connections.

Source : getsafeonline.com