WindowsXP Security

[kuphryn]

Hi.

I am using WindowsXP. I have an internet connection that goes through a router with buildin firewall. Nonetheless, sometimes when I disable the router's firewall, I found logs of invalid access in system security log. I have seen logs of users I do not know and should have be attempting to log onto the XP as a user.

Is firewall that is build into a router good enought? Should we use a software firewall such as ZoneAlarm too?

Lastly, with regard to that XP problem, is there a way to protect against users attempting to connect?

Thanks,
Kuphryn

 

[Workin']

Is firewall that is build into a router good enought?

For most situations, yes.

Should we use a software firewall such as ZoneAlarm too?

For most situations, no.

Lastly, with regard to that XP problem, is there a way to protect against users attempting to connect?

Umm, don't disable your router's firewall? And Windows XP Pro has a built in software firewall, you could turn that on.

 

[kuphryn]

Okay. Thanks.

Kuphryn

 

[PowerMacG5]

How do you check the logs in windows XP?

 

[kuphryn]

/Administrative Tools/Event Viewer/

Kuphryn

 

[PowerMacG5]

Where do I go from there to view the log?

 

[kuphryn]

Security.

You have to set XP to log all login before you can see the logs. You set that in /Local Security Policy/

Kuphryn

 

[Woodie]

I have to disagree with Workin':

The router firewall is ok most of the time for your setup.
Should you use a software firewall? Absolutely. The software firewall is much better at detecting/blocking unauthorized connections OUTBOUND from your machine than the router firewall. If you search a bit, you'll find a number of threads that ask the same question, and the answers are somewhat consistent.

The issue is what software to you allow to be installed on the clients, and could any of it be "tainted", or spyware?

 

[Workin']

Woodie, for most people (i.e., non-technical users), I think a software firewall like ZoneAlarm is nearly useless. Well, not necessarly useless, but far more trouble than it's worth.

I've had many clients and friends try to use it, and after about the 10th time of them calling me to ask if it's OK to let iexplore.exe or something really obscure but necessary access the internet, both their and my frustration tolerance is pretty much used up.

And the icing on the cake is when after many weeks of "training" the firewall which programs are OK to access the LAN or internet, it all of a sudden "forgets" all its settings and you get to do an un- and re- install which requires registry hacking to get it to work again. Most end-users REALLY dislike having to pay someone to fix crap like that.

 

[Woodie]

Workin' brings up some valid points. It sounds like ZA has "issues", which make it difficult/confusing for the end-user.

IIRC, TinyFW(?) has gotten good reviews...check in the Networking forum, they seem to get more queries/answers there.