You are reading:
Protecting Your Data: A Guide to Windows Firewall
Software-based Firewalls and Hardware-based Firewalls
Advantages and Disadvantages of Hardware-based Firewalls
Hardware-based firewalls also have some inherent limitations. If your computer is a laptop and travels to other locations, the hardware-based firewall in your home can.t protect you. Although there are small travel routers designed for use on a wired hotel network, a hardware-based firewall can't protect your computer if the Internet is accessed wirelessly.
If you have an always-on Internet connection, a hardware based firewall should be the first device on your network before you connect your computer to the link. Hardware-based firewalls for home and home-office use are relatively inexpensive and easy to install.
Advantages and Disadvantages of Software-based Firewalls
Software-based or "personal" firewalls are often the last line of defense between you and the Internet. Since a software-based firewall is physically part of your computer, this protection follows you everywhere. This is especially useful if a laptop is used at home, work, and wireless hot-spots.
Personal firewalls have the advantage of identifying which applications on the computer are creating security risks. If a worm infects your system and attempts to open your computer to the world, a software-based firewall will identify this new application service. The personal firewall will prompt you to confirm the new application or to prevent its use. Your personal firewall may be your first warning that a malicious program is attempting to use the network!
Software-based firewalls aren't the ultimate security tool, however. A personal firewall can't prevent viruses from entering your system through legitimate sources such as a web browser or through email. An anti-virus program with constantly updated virus signatures must always be included in an overall security strategy.
Personal firewalls also can't protect an entire network unless the software-based firewall is installed on every computer. In medium and large-scale environments, software-based firewalls must be managed properly to ensure optimal security coverage.
