Firewall (firewall), or as it is also called a firewall, firewall and network screen, monitor and control system connections between your computer, network and the Internet in order to detect and prevent attacks and intrusions in a timely manner. Programs of this class are especially useful in cases where it is necessary to control the Internet activity of installed applications.
No other free product is more tedious for the user than a firewall. And the reason is simple, the process of finding the right firewall necessarily involves a process of trial and error. A good firewall should protect the system without being too intrusive or difficult to manage and configure. In this review, you will be given the best free firewalls (according to this site) available today. Like all reviews, recommendations and advice are made taking into account the experience of different people. Therefore, if you have ideas or interesting opinions, they are always welcome.
Note: The reader should understand that powerful firewalls with flexible rule settings always require knowledge in the field of network design. However, even in their case there should be a more or less clear way of administration.
There are two types of firewalls - programs and hardware devices. Firewalls, presented in the form of programs (which will be discussed in this article), are installed on your computer and run in the background in order to closely monitor the actions of the system in real time. As with many security tools, to avoid potential conflicts, up to manually deleting files from boot drives, it is recommended to install only one firewall. Hardware firewalls are usually a special device with hardwired logic and modules optimized for filtering (for example, special processors whose command system includes operations with IP addresses). You can use software and hardware firewalls together. For example, modern routers, as a rule, include a built-in firewall and, depending on the type of router, it can not only be included in the firmware (as device programs are called), but also partially implemented at the chip level.
Having a basic firewall has long been critical to your computer's security, which is why many antiviruses are gradually including some of the firewall functionality. Simple firewalls, like the default Windows Firewall, allow you to restrict access to your system and personal information, silently protecting you from incoming threats. As part of the review, we will consider several basic firewalls that allow you to protect Windows a little better than a standard security tool can, for example, monitor attempts by programs to open outbound Internet connections (this action applies to outbound threats).
Note: The reader should understand that the standard Windows firewall provides a rather limited ability to protect against outgoing threats. Third party apps usually offer a wider range of options.
Proactive firewalls offer more advanced protection, including intrusion detection and prevention systems based on the collection of statistics about the behavior of programs and heuristic analysis, which allows them to protect your computer from a wider range of threats. These firewalls aim to create strong two-way protection, stopping not only incoming threats, but also protecting you from programs transferring your personal information to the Internet. The disadvantage of such firewalls is that they are more difficult to use and require more.
It is important to understand that today, having a firewall and antivirus (individually or as a single solution) is considered the minimum necessary basic approach to keep your computer secure.
Note: A lot of useful security information can be found on various parts of the site, such as an overview of intrusion detection and prevention programs for home use.
Tips and Precautions:
- Before installing security products, including antiviruses and firewalls, you should consider creating a full disk image. By creating such an image, you can restore your system back to the previous state in cases where critical errors appeared in the system after installing and configuring protection tools, for example, due to incorrect installation of components or if you changed critical system settings. In addition, images allow you to deal with complex viruses or just random conflicts in the system. So, for example, some system drivers may simply be incompatible with each other, which will cause your system to suffer. Starting with Windows Vista Ultimate, the system includes a standard backup and restore tool, but you can also use free disk imaging programs.
- To check the complete removal of third-party firewalls and other protection tools, it is advised to use uninstallers, since services, registry entries and other system objects may remain after removal.
Basic firewalls and firewalls
Preface or a few words about the built-in windows firewall
The built-in Windows Firewall is a more frequent choice of users, as it allows you to protect your computer from incoming threats and does not bombard you with pop-up messages. Also, the Windows firewall does not require installation (we are talking about versions of Windows where the firewall is included by default) and practically does not conflict with other programs. In addition, many average users cannot properly respond to pop-up notifications due to a lack of basic knowledge of the network device.
So if you need to scan your system for viruses and you don’t want (need) the additional features of third-party firewalls, in other words, the risk level is very low, then Windows Firewall may be exactly the solution you need, due to its simplicity and undemanding.
Alternatively, you can download a third-party firewall and replace the default Windows Firewall with the basic firewall for easier outbound control and additional features. Most two-way firewalls are limited to simple questions like allow or deny access to the Internet for unknown programs. And also, many firewalls automatically configure access to a pre-configured list of programs (often this list includes most popular applications) and save your decisions in their database. So, after some time, you will see almost no notifications.
And as an option, you can also use proactive firewalls, after disabling heuristics and analysis in them. In addition, this option may even be more suitable, since proactive firewalls, due to their complexity, simply contain a larger list of preliminary rule templates and access settings.
This is a well-designed firewall to control outgoing and incoming connections of the operating system, which will suit users of any level. ZoneAlarm protects the system from intrusions, and also controls the access of programs to the Internet. The firewall has an easy to understand interface. You can customize security settings to suit your needs, including shared (public) files and printers, network settings, and more. You can even turn off the firewall if necessary (by the way, quick access to this feature is insanely lacking in the standard Windows firewall). All customization is done using simple controls (sliders and others), so in most cases it will take you a few mouse clicks. To make it easier for users to get used to the program, at the first start, ZoneAlarm prompts you to scan installed programs and set permissions / denials for them. Please note that this first scan does not always allow you to correctly set access.
The first time after installation, you will have to monitor and adjust the actions of ZoneAlarm to make sure that all programs have a sufficient level of Internet access. But, the pop-ups are very simple and are presented in the "allow/deny" format with a flag to remember the selected action. Even novice users can easily understand it (the message will also indicate the name of the programs).
You can set the program control level that suits you. The low level assumes a learning mode (the firewall remembers all programs that use the network), disabling protection and a minimum number of pop-ups. The middle layer assumes that any access to a trusted network or internet will be with permission. The high level is not provided in the free version of ZoneAlarm. You can set any of the levels at any time. Using the "Smart Defense Advisor" module, the firewall will suggest the most accepted option for programs without rules by users around the world. You can choose not to use this module (although it will be very useful for beginners).
Setting up Internet zones includes a trusted zone, which implies a local network with shared files, printers, and others, and an Internet zone for access from the network. For each of the zones, a simple management format is provided from 3 options "no protection" (firewall off), "medium" (sharing / sharing resources such as files and printers) and "high" (allows you to use the network, but blocks someone on the network to access your system). The medium level is recommended for home networks with more than one operating system, and for cases where it is required due to devices (routers, routers). A high level is recommended for single machines with Internet access (for example, one computer at home and no internal network), as well as for public places where you are going to go online (WiFi in restaurants, and so on).
Overall, ZoneAlarm Free offers basic two-way protection with stealth mode and anti-phishing protection. However, the firewall lacks heuristic and behavioral modules, as well as the ability to allow/block access between programs.
It is worth noting that from version to version, the firewall is a little "easier" in terms of functionality. Perhaps this is just a temporary dynamic, but still.
It will be a good choice for those who aim to use the built-in Windows Firewall. Despite its name, the program is compatible with Windows XP and above. In a nutshell, Windows 10 Firewall Control allows you to more conveniently and easily configure the blocking and access of applications to the Internet in the standard Windows firewall. This firewall also adds a better way to manage outgoing connections. It is based on the Windows Filtering Platform, which is also based on the standard firewall. Therefore, unlike most other firewalls, the application does not install any drivers on the system. The user interface is made very simple and clear. It displays only what the program can do, i.e. block with "allow/deny" access settings and nothing else.
In total there are three modes - "normal", "allow all" and "disable all". The last mode completely disables access to applications, regardless of the firewall settings. The "allow all" mode speaks for itself, that is, unhindered Internet access for all applications (similar to turning off the firewall). If you don't need to test something, then normal mode is recommended - Internet access for programs will be provided depending on individual settings.
In normal mode, when the program tries to access the Internet for the first time (after installing W10), a pop-up window will appear with information about the application, publisher, and more. You can allow or deny access either once or permanently. If you select the first option, then the next time you start the program, the window will appear again.
In addition to the Windows 10 Firewall Control action pop-ups, small windows also appear in the lower right corner of the screen with access information (blocked / allowed access, and so on). These notifications can be turned off in the settings.
This is basically all that this firewall can do. The disadvantages include the moment that you have to configure access for all your applications, from the browser to the antivirus, which can be somewhat annoying with its routine. However, Windows 10 Firewall Control allows much easier and more convenient control over the built-in Windows Firewall than the operating system offers.
It is a lightweight firewall that is based on the standard Windows firewall. It is completely pop-up-free, so this firewall might be ideal for those who need a "set it up and do other things" kind of solution. The installer of this program weighs only about 1 MB. Installation is simple, but, unfortunately, does not contain the ability to select the installation location. Once installed, the firewall runs in the background with an icon in the system tray. All functions of the program are available only from the system tray - there is no "main window" type interface in it. In the pop-up menu, the user can select the necessary items, in particular, the firewall mode, general network activity, add/exclude applications/processes and call up the firewall settings dialog.
The dialog box with the firewall settings is also quite modest. General settings, with the ability to set a password to protect settings. A section that specifies the applications that are allowed to connect to the network. There is also a "Detect" feature that will try to detect known applications so that the user does not have to manually add programs. In addition, TinyWall can recognize related processes of the same application. For example, if you have a program that starts several processes, then by adding the program to the white list, all open related processes will also have access to the Internet.
It should be noted that when adding a program to the exclusion list, the application is not limited by UDP and TCP traffic. Depending on the nature of the program, it may be more prudent to restrict it to, for example, "outgoing" traffic only.
The Special Exceptions tab allows the user to set additional options. In particular, choose to allow or block access to system services. If you are not very good with computers, it is recommended to leave the settings "as is". On the maintenance tab, you can import/export settings, check for versions, and go to the developer page.
All in all, TinyWall is a lightweight firewall that is a good choice for those looking for an unobtrusive and easy-to-manage firewall.
Firewalls and firewalls with intrusion detection and prevention systems
Foreword or a few words about firewalls with intrusion detection and prevention systems
The following firewalls and firewalls provide better network protection and also support various implementations of intrusion detection and prevention systems. Each firewall comes with default settings so very few adjustments may be needed depending on the user's needs.
Firewalls in this section require more knowledge and time to set up and familiarize the user than basic firewalls, but they can provide a higher level of protection.
When choosing a suitable firewall, you should not rely on publicly available independent tests and other statements, since as part of testing, efficiency is checked at maximum settings, while most users have a simpler level of protection (after all, you want to use the Internet, and not sit in trench with access to one site). Therefore, most firewall developers strive to provide maximum "friendliness" of functionality, sometimes with a lower level of security settings (disabling monitoring of some indicators).
Consider these circumstances.
This is a solid firewall for those users who are looking for a full featured security package. This product is more intended for experienced and tech-savvy users. Its intrusion detection system is called "Defense+" and matches or even exceeds the capabilities of paid products. Komodo firewall provides a lot of control and settings, which will especially appeal to curious and restless users whose task is to ensure the maximum level of security.
Comodo includes protection against buffer overflow attacks and a lightweight sandboxing option that allows you to check unknown applications and program installations for how their launch will affect the computer's operating system. The use of a sandbox limits the negative effects of malware. Comodo contains a long list of known, trusted applications, but if an unknown application tries to gain access through the firewall, Comodo will first restrict the program and ask you what to do with it. In addition, all the functionality to control ports, protocols and configurations will be at your disposal.
During installation, you will have three options for installing the firewall - "firewall only", "firewall with optimal set of proactive protection" and "maximum proactive protection" (i.e. "Defense +", as mentioned earlier). Upon installation, Comodo automatically selects "Safe Mode" which will result in numerous pop-up notifications for applications that are not on the list of trusted programs. If you select Allow/Deny and choose to remember the answer, Comodo will create and save a custom rule for the application, which you can always edit from the general list.
If you select Clean PC Mode, Defense+ will automatically mark all applications on your drive as safe. Please note that if there is a virus among the programs, then it will also be considered safe, so use this function carefully and only in cases where you are really sure that the programs are safe. However, these applications will still be monitored, albeit at a minimal level - checking Comodo protected objects (registry and COM interface), monitoring established rules, and so on. All added files will automatically be added to the list for review, marked as potentially unsafe, and running them will result in pop-up messages as if you were using safe mode until you set the rules.
Comodo reduces the frequency of alerts by automatically detecting programs as safe based on Internet access rules. However, you can further reduce the number of "Defense+" alerts by one or more methods:
- Immediately imply your answer, like "remember answer", for all warnings. In other words, when any application is first launched, the answer will immediately be assumed to be a permanent solution. However, you must use this setting carefully, as applications need to temporarily grant or deny access from time to time.
- Add programs to the lists of safe or trusted files
- Use clean computer mode. It is recommended that you first make sure that the programs on your disk do not contain viruses and trojans.
In general, Comodo Firewall is a powerful firewall with a lot of flexible settings, which is great for providing a high level of protection. However, it is designed for those users who have some knowledge of Windows device and networking. Novice users are strongly advised not to use this firewall.
The former commercial firewall is now free with no limits. This proactive, layered security solution, along with standard firewall protection, includes behavioral blocking technology that monitors and checks for viruses, spyware, malware, process and application security, registry, and more. Private Firewall can certainly be called a multifunctional firewall with an intrusion detection and prevention system.
The user interface of the program may seem a little confusing and cumbersome. There are many customizable options, so sorting can sometimes feel lacking. Of course, each section contains a fairly voluminous help with explanations, but still. The learning mode allows you to allow all actions of programs within 180 seconds, which is ideal for quickly setting up rules for newly installed programs (no need to create dozens of rules for each port, protocol and address). However, be prepared that the first launch of the firewall may result in the blocking of a number of seemingly known programs.
You can set different security levels (high, low, and custom) for the internal network and the Internet. In other words, for example, if you have a couple of computers or a printer on your home network, then it makes no sense to limit them in the same way. You will also have three profiles at your disposal - home (Home), office (Office) and remote (Remote). You can set the appropriate settings for each and easily switch as needed, especially useful for laptops. Another useful feature is that you can block outgoing mail with a single click, which is handy when you're running an email client and don't want the app to randomly or on schedule send emails.
In general, Private Firewall is a fairly effective firewall that has fairly good ratings on the Internet. However, the graphical interface and ease of use will be more appreciated by tech-savvy users. The newbie just gets confused.
A firewall is a good choice for users who want flexible security settings without sacrificing usability. Its interface is carefully organized and retains its functionality (normal users can easily handle it). For example, alerts are simplified but just as functional, so you can quickly and easily set up rules or apply actions. In addition, the firewall remembers all responses in pop-up messages without the need to create additional rules, notifies you of all configured rules in learning mode, and notifies you of all automatically applied rules, for example, for browsers when changing versions.
The free version lacks many of the extra features of the paid version, such as the ability to disable an active connection. However, the possibilities are quite sufficient. You can choose from 5 levels of protection, ranging from completely blocking connections to allowing all actions, including the "Rules Wizard" medium manual learning mode. In addition, the Outpost firewall monitors various dangerous activities of applications, including memory injection, driver loading, access to critical system objects (registry, files). Also, the Outpost database includes a lot of pre-configured rule templates, so setting up Internet access for applications will most often consist of a couple of mouse clicks.
The installer will ask you if you want the firewall to learn for a week (using the "Rules Wizard" auto-learning mode and manual learning). In this mode, the firewall will automatically set rules for known safe applications.
All in all, Outpost Firewall Free is a good choice for those looking for a balance between functionality and interface.
Firewall differs from its counterparts in that it comes with additional protection modules, namely the registry, pop-up blocker and parental control - something like a package solution. Firewall is less customizable than the previous firewalls listed in the overview, but many of the standard sections are still available. Three levels of protection - off (turn off the firewall), custom (allows you to configure rules for connections) and high (blocking all connections). Each section in the program interface is quite clean. Alerts generally provide clear and concise information.
The registry protection module provides control and security of the registry for modifications, with the ability to customize specific sections. The parental control module, as the name suggests, limits the available list of sites, but you need to manually add each site. Module problem in logic. You can specifically allow certain websites, you can't just block individual websites. The pop-up blocker monitors browser behavior and blocks pop-up ads and more. All three of these add-on modules can be disabled individually. AVS Firewall also comes with a monitoring utility so you can check the amount of network traffic passing through for each application.
During the installation of this firewall, the installer automatically installs the AVS Software browser. Unfortunately, there is no way to refuse, but after installation you can remove it separately without any consequences for the firewall.
All in all, AVS Firewall is a pretty good firewall that will appeal to those who need to provide more security than basic firewalls and who don't want to delve too deeply into the specifics of the network device.
Note A: AVS Firewall is no longer supported by the manufacturer.
Other firewalls and firewalls for Windows
While it's rare to see older operating systems like 98 or Me, they shouldn't be left unprotected either, especially if they aren't hidden behind other firewalled systems. So if for some reason you use them, here is a small list of firewalls and firewalls for Windows 95-2000. Please note that these firewalls are no longer supported by manufacturers and may contain errors or lead to problems that, most likely, no one but you will consider. However, having an opportunity is better than not having it.
- Sygate Personal Firewall (Windows 2000 / XP / 2003) [Deprecated]
- NetVeda Safety.Net (Windows 95/98 / Me / NT / 2000 / XP, requires registration) [No longer supported]
- Filseclab Personal Firewall (Windows 95/98 / Me / NT / 2000/2003 / XP 32-bit) [No longer supported]
Today we will talk about free firewalls (firewall), the better to protect your system in the absence of extra funds for protection. We offer three popular software products at your discretion: Ashampoo Firewall Free, PC Tools Firewall Plus and Online Armor Free.
Let's start with the product Ashampoo Firewall Free developed by Ashampoo, it has an easy and informative interface, there is Russian in the list of languages, which will make it easy to set it up.
To get started, just visit the manufacturer's website, register, receive an activation code by e-mail, which must be entered in the program and that's it.
The program has two modes of operation: simple and expert. Of course the second mode is better, but even on a simple one you will get decent protection.
The program consists of five modules: Rules (setting the parameters of Internet connections), Statistics and Log (in them you will find information about the operation of the program and the state of your protection), Configuration (using it you can configure the program inside), utility (contains a pop-up blocker). windows, process manager, auto start, Internet surfing history)
The principle of operation of the firewall (firewall) is that the program informs the user about unauthorized actions, suggesting that a rule be applied to him. It also contains a learning function and, if necessary, can block all connections.
Next on our list is PC Tools Firewall Plus. It is also absolutely free and in Russian. It has very good reviews in the fight against keyloggers and blocks unauthorized downloading of information from your computer by Trojans.
The advantage of the program is the installation without any registration. Firewall (firewall) provides a hidden presence on the network, protects the connection with passwords. You can also manually configure connection settings. The program creates lists of IP addresses, verified ports and analyzes network traffic.
Another interesting software product Online Armor Free was created by Emsisoft-GmbH. This software product has just the same huge set of tools to combat virus threats, network attacks, hidden scripts.
Pro active protection controls the operation of the program. Online Armor Free scans the system and detects dangerous applications by marking them.
It has a convenient and easy navigation, allows you to make lists for ports, domains, IP addresses, and suspicious programs in startup. It has the ability to classify sites for potential threats.
Windows 7 Firewall Control Plus is a small free program that will help you control applications that try to access the Internet. The program uses the mechanism of the built-in Windows XP/7/8/Vista firewall, while offering additional features to control the access of programs to the network and the Internet.
Outpost Firewall Free is one of the best network defenders that is designed to protect your computer from threats coming from the Internet - scanners, Internet worms, etc.
SoftPerfect Personal Firewall is a free network firewall designed to protect your PC from attacks from the Internet or through a local network. SoftPerfect Personal Firewall offers customizable security using custom rules for packet filtering.
Comodo Firewall is one of the best firewalls out there. The manufacturers of this program, unlike others, offer the full version of the defender against network and Internet threats, for free. Comodo Firewall is easy to manage and aimed at inexperienced users.
Comodo Firewall.
Comodo's free personal firewall for Windows XP and Vista. Part of Comodo Internet Security. Program features: proactive defense; protection against Internet attacks; buffer overflow protection; protection against unauthorized access; protection of system files and registry entries from internal attacks. Proactive protection includes HIPS (Host Intrusion Prevention Systems) - a system for repelling local threats. The task is to control the operation of applications and block potentially dangerous operations according to specified criteria.
Official site: http://personalfirewall.comodo.com/inte ... ewall.html
A free firewall created using a community solution. Designed to protect personal computers running Windows 2000 and XP. The meaning of a community solution is that a large group of network security experts prepare and share settings for work, which are constantly updated, taking into account the emergence of new applications. These security settings can be downloaded for free from the community site. This approach of the developers should allow even the most unprepared user in security issues to easily configure their firewall for its optimal operation, i.e. protect your computer as much as possible.
Official site: http://force.coresecurity.com
Online Armor (Online Armor Security Suite)
Combines convenience and ease of use, reliability of protection. The program perfectly performs the function of maximum protection and provides an opportunity to get an excellent user experience. Online Armor won the "Best Firewall of 2008" award.
Official website: http://rus.tallemu.com
PC Tools Firewall Plus
This is a free, easy-to-use yet effective personal firewall for Windows that protects the information stored on your computer from unauthorized access from local networks or the Internet. By controlling the operation of various applications, it blocks the attempts of trojans, backdoors, keyloggers and other malicious programs to harm your computer and steal your confidential information.
Official site: http://www.pctools.com/ru/firewall
There are many organizations on the Internet that have specialized in spying on users. Some surf for marketing reasons, others spy on users of file-sharing networks to record illegal activities. At the same time, honest users also come across such organizations. Fortunately, most of these organizations use static IP addresses, which makes it easy to block them. The Peer Guardian program is very good at blocking these IPs. Supports lists of addresses to be blocked, automatic updates from the black list on the Internet. Blocks all kinds of protocols TCP, UDP, ICMP, etc.
Official site: http://phoenixlabs.org/pg2
An effective and easy-to-use firewall that blocks hackers and other unknown threats while working on a local network or on the Internet. Flexible settings and a user-friendly interface will help you quickly protect your computer. In ZoneAlarm, you can set the security level for each program individually or use general settings for all programs. With this firewall, you can instantly block the access of programs trying to connect to the network and the Internet, automatically check e-mail attachments. The ZoneAlarm firewall is free for personal and non-commercial use (including government and educational institutions).
Official site: http://www.zonealarm.com/security/en-us ... wnload.htm
GeSWall (GentleSecurityWall)
A useful, free firewall that protects your computer from intrusions and malware by isolating vulnerable applications. Application isolation is based on an access restriction policy that effectively prevents all kinds of known and even unknown attacks.
Official website: http://www.gentlesecurity.com
Outpost Firewall Free 2009
Provides reliable protection, in addition, you get advanced protection against unauthorized program activity, which helps block unknown threats. Main features: two-way firewall; protection that cannot be turned off by hackers; application monitoring; has an intuitive interface; low requirements for system resources; network activity monitoring; support for Windows Vista and 64 bit architecture.
Official site: http://free.agnitum.com
What is the best firewall firewall) for Windows - this question torments many Internet users, paid or free, software or hardware. This question can be answered immediately and almost unequivocally: the best firewall ( firewall) this is hardware but, the very best firewall ( firewall
As previously mentioned the best firewall ( firewall) is a hardware one, the prices for which sometimes reach 50-70 thousand USD. but, today's topic will be a brief analysis of software firewalls ( firewall) For Windows reliability/performance ratio...
firewall (firewall) is an important item in your PC security arsenal. Unfortunately, the standard firewall ( firewall) for Windows does not provide the desired functionality and blocks or allows only incoming connections, and all outgoing connections are allowed by default, although the reliability of the built-in Windows firewall (firewall) without doubt.
The most popular firewalls today ( firewall) for personal PCs is:
You need to decide what is the decisive factor for you when choosing - ease of use or reliability / performance ?! Above given list of the most common firewalls (firewall) for Windows, in order of preference by our citizens. We will not delve into the details of each product, but consider only the main points of the first two ...
Agnitum Outpost Firewall Pro
Agnitum Outpost Firewall Pro development of domestic programmers and is the most preferred firewall ( firewall) among ordinary ordinary domestic users who almost never look at " Task Manager". Agnitum Outpost Firewall Pro more convenient to use and provides more extensive information about ongoing network events around your PC..
Easy to use and provides good stats about what's going on in the network but ease of use doesn't mean reliability/performance! Ease of use " Agnitum Outpost Firewall Pro"costs the user in overspending system resources and in some places in regular BSOD. So for example the combination NOD32 v4.0 + Outpost Firewall 2.x caused a regular BSOD, Outpost Firewall older ones are more gluttonous on system resources, and especially when downloading large files through a fast network connection and from servers with a good return!
Versions of " Outpost Firewall" above the 6th in which the process " acs.exe"when downloading large files over a fast network connection and from servers with a good return, it devours from 15 and before 50% system resources, and sometimes even higher! And it doesn't matter here setting rules or disabling all additional features - it devours system resources ( CPU+Memory) no matter what and even in idle state ( CPU 8-15%)!!! In version " Outpost Firewall 7.5"named" performance edition":)) "acs.exe"behaves less aggressively when idle, but the time it takes to download large files over a fast network connection and from servers with a good return is all one devours from 15 and up to 50%
Version " Outpost Firewall 4" not so gluttonous, but, there were often crashes when changing user accounts and not only! No offense to the company's programmers " Agnitum"but, they are still very far from such products as" Comodo Firewall Pro", "Comodo Internet Security" or " Checkpoint Firewall-1"! Like it or not, but Western developers are making great strides in the field of software than domestic ...
Comodo Firewall Pro
After long wanderings in search of the best firewall ( firewall) my choice finally settled on " Comodo Firewall Pro 3.14"which is unlike" Outpost Firewall"remarkably stops attempts of incoming connections and wildly does not devour system resources - in the idle state it consumes no more than 0-2% CPU and 3-4 MB. In addition, when completely turned off or falling " Comodo Firewall Pro 3.14"which is unlikely, there is no access to the network, which cannot be said about " Outpost Firewall".
The program is able to independently analyze each potential threat and, if necessary, issue an appropriate warning. Wherein " Comodo Firewall" Recognizes more than 10,000 different applications in various categories ( for example, “safe”, “spyware”, “adware”, etc.).
"Comodo Firewall" also has proactive defense, proactive defense includes HIPS ( Host Intrusion Prevention Systems) - a system for repelling local threats. The task of HIPS is to control the operation of applications and block potentially dangerous operations according to specified criteria.
Main characteristics " Comodo Firewall Pro":
- - Complete permanent control and protection of your personal computer from Internet attacks, Trojans, hackers, malicious scripts and other unknown threats.
- - Free updates - Comodo Firewall Pro notify you when updates are available and, upon your consent, install them.
- - Full control over the activity of programs on the Internet.
- - Control over software updates.
- - Real-time traffic monitoring gives you the ability to instantly respond to possible threats.
- - Simple, intuitive multi-language interface ( including Russian).
- - Free for home and other network users.
"Comodo Firewall Pro"by default, it does not provide statistics on all attempts to cut off incoming connections, but with the creation of certain rules and proper configuration, you can get these statistics. My choice is definitely in favor of " Comodo Firewall Pro 3.14"and I think that it will remain unchanged... Why exactly version 3.14, and not 4.x or 5.x? - yes, because version 3.x contains the most basic functions without unnecessary "bells and whistles" and it is less demanding on resources than 4.x or 5.x?...
According to matousec.com, Comodo's products continue to take first place among test participants: http://www.matousec.com/projects/proactive-security-challenge/results.php
The truth in Comodo Firewall Pro"there are no such useful features as blocking active elements and the statistics are miserable, but this disadvantage in favor of saving system resources can be compensated for by the Firefox browser and the "AdBlock" + "NoScript" plugins, and if necessary, we will collect statistics with other programs ...
wipfw
wipfw is an analogue of the ipfw console firewall, but only for windows. Has more features than the standard Windows XP firewall. Can limit the number of connections from a specific IP address or range of IP addresses. It is possible to determine packets by the set flags SYN, FIN, etc..
Conclusion
How many people have so many opinions, there are a lot of firewalls on the network ( firewall) and each of them has its own loyal users who have chosen one or another firewall ( firewall) according to your preference. Once again I want to emphasize that the best firewall ( firewall) this is hardware but, the very best firewall ( firewall) is the one that is configured by direct hands ...
Indeed, Windows comes with a built-in firewall that is especially effective on recent versions of Windows. However, users can choose an alternative solution, especially if it's free. The 2016 version of ZoneAlarm Free Firewall is not much different from its predecessor, but it still has some useful improvements.
Resistant firewall
The main window of the program has not changed much. Three large panels represent antivirus, firewall and data protection. The antivirus panel received a gray fill with a message that antivirus protection is available but not installed. This assumes that you will be using ZoneAlarm with your favorite antivirus solution, such as Panda Free Antivirus (2016) . If you don't already have antivirus protection, click the button to install it, after which the product will actually turn into ZoneAlarm Free Antivirus + Firewall 2016 .
When reviewing the old version of ZoneAlarm, it turned out that the installer required to change the search engine and home page in the browser. Certainly, these manipulations allowed the developers at Check Point to get some income. The 2016 version no longer enforces these changes and no longer includes the licensed toolbar, which many users have found useful. In addition, the product is no longer protected against phishing. it was a functional part of the toolbar, but on the other hand, anti-phishing is not a typical firewall component.
ZoneAlarm is one of the earliest personal firewalls on the market - the product has been developed and improved over the years. The program does an excellent job of switching all system ports to stealth mode, making them invisible to external attacks. The Windows Firewall also effectively copes with this task, so unsuccessful attempts to hide ports with third-party solutions look at least suspicious. Note that despite the fact that the developers of the firewall in Kaspersky Internet Security (2016) decided to abandon the function of hiding ports, the product is seriously focused on detecting and blocking network attacks.
ZoneAlarm does not attempt to detect network attacks that attempt to exploit system vulnerabilities. This level is usually not presented in free solutions. In PCMag amateur tests, the Kaspersky firewall detected the majority of exploits, while Symantec Norton Security identified and blocked absolutely all of them.
ZoneAlarm software control configures network and Internet access permissions for all programs that attempt to connect. By default, the component scans programs at a medium sensitivity level, which offers the best balance between good protection and fewer pop-up alerts. The tool uses Check Point's extensive DefenseNet database to automatically configure permissions for a wide range of known trusted programs.
When testing at a medium level of protection, a self-written browser was detected, but when automatically granted permission, it was allowed outgoing connections. When the sensitivity was set to maximum, the component detected access attempts and asked the user whether to allow these actions. Given the huge number of well-known programs whose network access is automatically handled by the firewall, it is recommended to use maximum protection and pay attention to pop-up alerts.
Of course, the firewall can only control network access attempts that it can detect. Leak testing software mimics stealth network access methods used by some malware to masquerade as safe applications. In the test, ZoneAlarm found most of the leak tests, and identified one of them as a malicious application.
In terms of direct targeted attacks, ZoneAlarm was one of the first personal firewalls to successfully resist these types of threats. The tests failed to find a way to disable firewall protection. One method that often works is to disable the startup of important firewall services. When trying to do these manipulations, ZoneAlarm displayed the message “Access denied”. With Comodo Firewall 8, this method worked, but on reboot, the firewall detected a problem and offered to fix it.
OSFirewall
When the sensitivity of the software control was set to maximum protection, it was noticed that in addition to alerts about network access attempts, the firewall also displayed pop-up notifications about suspicious behavior. This functionality is provided by the behavioral component of OSFirewall.
On the medium sensitivity mode, when installing 20 old PCMag utilities, alerts did not appear. After the protection level was increased to the maximum, each utility triggered at least one pop-up alert, most of which were displayed during the installation of the test sample. When creating and running a temporary copy of the installer, the firewall reported such a suspicious action as an attempt to access with administrator privileges. Many utilities have raised a warning that an application is trying to interact with Windows Explorer by opening its process.
Naturally, if you choose to block any manipulation data, the installation will fail or the program will not work correctly. The maximum level of protection is still recommended, but when installing new programs, it is advisable to lower it to medium sensitivity. It's worth noting that Comodo's behavioral analysis feature generated even more alerts - in some cases over a dozen per utility.
Cloud Backup
Along with the installation of ZoneAlarm, the user is offered to receive 5 gigabytes of cloud storage for free from ZoneAlarm's partner - IDrive. The premium version, priced at $59.50 per year, offers 1 terabyte of cloud storage. IDrive received the Editors' Choice award in the category of cloud storage services.
When the user initially clicks on the link to activate cloud storage, a page opens that explains the service's capabilities and allows you to install a standalone backup application. As mentioned, you can get 5 gigabytes for free, you will receive a similar offer directly from IDrive. If 5 GB isn't enough for your needs, you can upgrade to the Premium plan for 1 TB of cloud space. Panda Internet Security 2016 only offers two gigabytes of Mozy-based backup storage, but the user can get a 15 percent discount on other paid Mozy plans. A spokesman for ZoneAlarm stated that they also offer discounts in the form of promotions.
To activate the backup system, you need to create an account. Enter your name, email and password and you can proceed to the next step. You then need to tell IDrive whether to use the standard encryption key or your own key. If you choose the second option, you will have to remember this key, otherwise you will not be able to access your data. On the positive side, even with an official request from government agencies, IDrive will not be able to decrypt your files.
The backup utility does not waste time. Immediately after the installation is completed, the backup of important folders begins: Desktop, Music, Pictures and Documents. You can easily add your own folders and files to copy.
The backup tool allows you to save a copy of your files locally or on a server. In addition, you can create an image backup of the entire disk, although it most likely will not fit on the available 5 gigabytes. From any computer connected to the Internet, you can log into your account and manage your backup files. The service even includes a graphic file viewer. In addition, the tool has support for mobile devices and social data backup, as well as many other features.
Data protection
The Identity Protection component in ZoneAlarm has two parts. First, the Identity Protection service performs credit monitoring and notifies you of any changes in your credit history. In addition, the Identity Lock feature prevents unauthorized transfer of user data from the system.
The monitoring service is provided by ZoneAlarm partner Identity Guard. In particular, you get one year of what is called Good Start protection. After entering personal data, the service will check credit data every day and notify by e-mail about any changes in the credit file. If you have questions about the service or are confused by any alert, unlimited free technical support is at your service. Although the service is free, the user will need to enter credit card information as part of the verification process.
Identity Lock is disabled by default because it cannot work when there is no personal information. When entering data, the user can choose from 10 different categories, including telephone numbers, credit cards and addresses. For each object, you can specify a descriptive name and directly the data that you want to protect. By default, ZoneAlarm uses one-way encryption to store data. Thus, if an attacker has gained access to the program, he will not be able to read your private data.
With a medium level of protection, ZoneAlarm notifies you of any attempt to transfer protected data via email and in the browser. If you choose to cancel the transfer, your data will be replaced with asterisks. At the maximum level of protection, the data is replaced with asterisks automatically, without any extra requests. Please note that Identity Lock does not work with HTTPS-secured connections.
Free but proud
In modern realities, the market for autonomous personal firewalls is, frankly, small. The growth in the effectiveness of the built-in Windows Firewall predetermined the choice of the majority. A paid solution will have a very difficult time here.
ZoneAlarm Free Firewall 2016 and Comodo Firewall 8 are our Editors' Choice Firewalls for Windows. Comodo includes a rich set of useful features, including the sometimes problematic behavioral blocking. ZoneAlarm contains all the necessary firewall features and includes its own perks. If you want to abandon a system solution in favor of a third-party personal firewall, this product is worth a try.
Review of ZoneAlarm Free Firewall 2016:
Advantages
- successfully hides all system ports;
- manages the access of programs to the Internet and the network;
- no longer forcibly installs the toolbar and changes the homepage settings;
- effectively resists attacks;
- includes protection of personal data, backup to cloud storage.
Flaws
- no longer includes anti-phishing protection;
- at maximum sensitivity, behavioral detection generates a large number of false positives.
Overall score
ZoneAlarm Free Firewall 2016 does all the traditional firewall tasks and no longer comes with a toolbar. Cloud backup and credit status monitoring make this free product an even more interesting choice.
Faced a serious problem. The young Windows was good, but it had a huge number of dangerous vulnerabilities, due to which hackers could easily get into the system. The only way out of the situation was to develop separate software that would monitor network activity and stop unwanted traffic.
Microsoft has developed its own firewall and integrated it into Windows. Today, this application is known to us as the Windows Firewall. unfortunately, the built-in firewall was not very reliable. Your computer still needs third-party applications to provide network security. Here are the best free firewalls that will give you that security.
ZoneAlarm Free Firewall
ZoneAlarm Free Firewall - one of the oldest and most famous firewalls. Its first version was released back in 2000, and the most recent one was released in January 2017. The firewall can hide open ports, detect suspicious traffic, and disable malware. Also, ZoneAlarm Free Firewall regularly communicates with the DefenseNet server, from where it draws information about the most current threats. The firewall is able to protect the user's PC when working through public Wi-Fi points. The only disadvantage of ZoneAlarm Free Firewall is that it may conflict with other network security software.
Comodo Firewall
If you don't like firewalls annoying with too frequent notifications, you should pay attention to Comodo Firewall . This program is rather "silent" and does not bother the user over trifles. Meanwhile, Comodo Firewall is quite reliable. The firewall monitors your network and compares system and application data with a huge list of dangerous files. At the moment, this list contains information about more than 2 million threats. It is replenished daily.
PeerBlock
While many firewalls try to provide comprehensive protection, PeerBlock serves only one purpose. This firewall blocks access to your computer from known dangerous addresses. This is a great choice if you want to protect your privacy from ad networks, tracking software, government or private anti-piracy organizations, and other online scumbags. PeerBlock automatically updates the list of potentially dangerous addresses, but you can also change it manually.
TinyWall
TinyWall - lightweight and silent firewall that does not annoy the user with pop-up windows and notifications. Basically, TinyWall can be considered a plug-in that enhances the built-in Windows Firewall. The program is perfect for beginners, because it does not have any complicated settings.
OpenDNS
OpenDNS - not a downloadable firewall, but an Internet service that provides public and secure DNS servers to everyone. You just need to specify the correct data in the settings of your router so that all your traffic goes through these servers. This is very convenient for users whose home network has a lot of Internet-connected devices, especially smart home gadgets.
Anti NetCut3
If you often need to use public Wi-Fi, the firewall Anti NetCut3 can help you secure your system when connecting to a compromised point. This program is designed for the sole purpose of monitoring a specific network connection. All you have to do is specify which adapter to monitor. This can be a Wi-Fi adapter if you are connecting "over the air", or a network card if you are accessing the Internet via cable.