full-disclosure - PC Firewall Choices

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Jan 19 01:10:02 2006
From: johnlacour at gmail.com (John LaCour)
Subject: PC Firewall Choices

On 1/17/06, Valdis.Kletnieks@...edu <Valdis.Kletnieks@...edu> wrote:
>
> Even more important, a hardware firewall can't be compromised as easily
> by malware that's on a host behind the firewall.  It's easy for a program
> on a PC to tell ZA to look the other way.  ...

Not all security software is equal.  ZA actually does a very good job
of protecting
itself from tampering compared with the vast majority of AV/AS/FW software.

A hardware firewall has no knowledge of the application involved which is
another dimension to policy that a desktop firewall gives you control over
which a hardware firewall does not.

Personally, I advocate using both.

-John