[Full-disclosure] PC Firewall Choices

[John LaCour]

On 1/17/06, Valdis.Kletnieks at vt.edu <Valdis.Kletnieks at vt.edu> wrote:
>
> Even more important, a hardware firewall can't be compromised as easily
> by malware that's on a host behind the firewall.  It's easy for a program
> on a PC to tell ZA to look the other way.  ...

Not all security software is equal.  ZA actually does a very good job
of protecting
itself from tampering compared with the vast majority of AV/AS/FW software.

A hardware firewall has no knowledge of the application involved which is
another dimension to policy that a desktop firewall gives you control over
which a hardware firewall does not.

Personally, I advocate using both.

-John