Index: > A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Home > Personal firewall

A personal firewall is traditionally a piece of software installed on an end-user's PC which controls communications to and from the user's PC, permitting or denying communications based on a Security Policy.

A personal firewall differs from a conventional firewall in that there is no separation between the firewall software on the user's PC and the user's application software. A personal firewall will not usually protect any more than the one PC it is connected to, unless other PCs are sharing Internet connectivity via the protected PC.

Another distinction from conventional firewall software/devices is that personal firewalls are able to control communications using methods such as prompting the user each time a connection is attempted, and 'learning' from the responses, to determine what Internet traffic a user would like to permit to/from their PC.

This software may also provide some level of intrusion detection, allowing the software to terminate or block connectivity where it suspects an intrusion is being attempted.

1 Problems and weaknesses

For private users, shutting down all unneccessary network-aware services and installing up-to-date patches is often enough to secure the system against (nearly) all outside threats
Because they are installed on the system they protect, attacks on the firewall also affect that system and vice versa:
- Instead of reducing the number of network-aware services, a personal firewall is an additional service that consumes system resources and can also be the target of an attack, as the Worm Witty [1] has already shown.
- If the system has been compromised by Malware, Spyware or similar software, these programs can also manipulate the firewall, because both are running on the same system. In the past, security experts have found numerous ways to bypass or even completley shut down software firewalls.
They will often alarm the user about attacks on harmless occasions, for example connection attempts to closed ports, or misinterpret normal network traffic as an attack.

While many people claim that the uses outweight the negative aspects of personal firewalls, others claim that personal firewalls are snake oil, because they do not offer any real advantages but try to make the user believe that they are effective with constant alerts about " hacker attacks".

2 External links

2.1 Personal firewall vendors

The following vendors provide Personal Firewall products:

http://www.tinysoftware.com/ - Tiny Software
http://smb.sygate.com/firewall/free-personal-firewall-ww.htm - Sygate Technologies
(Free version available at Sygate link above)
http://www.symantec.com/ - Symantec
http://www.kerio.com/ - Kerio -- Kerio Personal Firewall 4.0 Light is freeware
http://www.mcafee.com/ - McAfee
http://www.zonelabs.com/ - Zone Labs
http://www.agnitum.com/ - Agnitum
http://www.iss.net/ - Internet Security Systems
http://www.deerfield.com/ - Deerfield
http://www.norman.com/ - Norman

http://www.firewallguide.com/ is an excellent resource for Personal Firewall information.

http://www.samspade.org/d/firewalls.html a different view of personal firewalls

Windows XP has an integrated personal firewall, called the Windows Firewall.

Politics	Business	Finance

Topics: Personal Firewall Software System Firewalls User Security...

Personal area networkA personal area network PAN is a computer network used for communication among computer devices (including telephones and personal digital assistants) close to one person. The devices may or may not belong to the person in question. The reach of a PAN is	Personal digital assistantPersonal digital assistants PDA s) are handheld devices that were originally designed as personal organizers, but became much more versatile over the years. A basic PDA usually includes a clock, date book, address book, task list, memo pad and a simple ca	Personal TelcoThe Personal Telco Project (or PTP) was founded by Adam Shand in November 2000 after reading a Slashdot article about the Consume The Net project in London, England. It is a wireless community project based in Portland, Oregon. It currently has 110 wirele
Personal computerThe term personal computer or PC has three meanings: IBM's range of PCs that led to the use of the term see IBM PC. A generic term used to describe all microcomputers (mentioned here). A generic term sometimes used to describe a computer based on IBM's or	Personal propertyPersonal property is a type of property. In the common law systems personal property may also be called chattels it is distinguished from real property, or real estate or realty. In the civil law systems personal property is often called movable property	Personal Communications ServicePersonal Communications Service or PCS is the name for the 1900 MHz radio band used for digital mobile phone services in the United States. CDMA, GSM, iDEN, and TDMA systems can all be used on PCS frequencies. The FCC set aside the band of 1850-1990 MHz f
Personal attack	Personal jurisdiction	Personality psychology
Personal mobility	Personal rapid transit	Personal video recorder
Personal History, Adventures, Experience, and Observation of David Copperfield the Younger	Personal trainer	Personal development

Non User