• Tried a couple of free firewalls, went back to Win 7 firewall

    Home » Forums » Cyber Security Information and Advisories » Code Red – Security/Privacy advisories » Tried a couple of free firewalls, went back to Win 7 firewall

    Author
    Topic
    #476097

    After reading about strenghts and weaknesses and reading reviews, I decided to try a couple of 3rd party firewall apps to replace the Win 7 firewall. I download Comodo Security Suite free edition and PC Tools Firewall Plusfree edition. I chose these 2 because of various reviews. I could have tried a couple of others, but decided these were representative of the large group of 3rd party firewalls presently available.

    It seemed that after installing the above apps (they were installed and tested one at a time, remember 2 different Security Apps of the same type should not be run at the same time in real time), I started having problems with some of the other apps on my PC. Both replaced and disabled the Win 7 firewall by default. PC Tools Firewall Plus is just a firewall, Whereas the Comodo product is a suite, although you can install any or all of 3 different apps. If the entire suite is installed, it intergrates nicely with all 3 apps working together.

    I started to immediately have problems with my Filehippo Update Checker. This is an app I use a lot along with Secunia PSI to update the various apps on my PC.SIWfree edition also started having problems updating.

    Long story short, I uninstalled both. Let me state I’m glad I created an Up To Date Image just prior to this test. Because of the various problems I was having, I finally restored from my Image to quickly get back to where I was. This is another time when Imaging saved my bacon.

    Bottom line is that the Win 7 firewall is a very good app that integrates with the OS well and just works unobtrusively in the background. As I have said, I like to try different things with my PC and this was just another example of my “playing” with my PC.

    Viewing 21 reply threads
    Author
    Replies
    • #1276219

      Hi Ted, great minds think alike. I had been using Online Armor Free, it was flagged by Action Center that both were turned OFF but only after a few minutes of starting my Laptop, plus it also gave an error in Event Viewer as being slow to start.
      I’m now on the newly released version of ZoneAlarm, it has not displayed a pop up asking permission since it was installed a few days ago. Highly recommended.

    • #1276234

      I started to immediately have problems with my Filehippo Update Checker. This is an app I use a lot along with Secunia PSI to update the various apps on my PC.SIWfree edition also started having problems updating.

      Was it difficult to “allow” these programs to access the internet? It should be a one-time update (assuming the typical firewall design).

    • #1276236

      On my Win7 Home Prem PC’s, I could not get Filehippo Updater to work if installed so I’m using the Portable version.

    • #1276245

      The allow was not difficult, but I kept getting errors conecting to the server. Even uninstalling, reinstalling FileHippo Update Checker did not solve the problem. Because I had a couple of different firewalls to try I did not do a lot of t/s, just restored from Image and went on. My feeling is these apps should be unobtrusive and just block nasties. I should not have to massage my apps to work with the firewall, period. If I do, then it just does not work for me. Several times I had to “allow” the app as a trusted app more than once even though I told the app to remember my choice. Going through the options, especially on Comodo was a daunting task. I guess I just lost my patience since the Win 7 firewall does not require this level of user intervention.

      The update just never seemed to happen. I had to uninstall / reinstall the newer version and then there was 3 instances of the allow in Comodo. Just too much effort for my likes.

    • #1276274

      I don’t think Windows firewall keeps tabs on programs in a way to determine if a program changes, as the best of 3rd party firewalls do. This is a mechanism to stop rogue apps from impersonating legitimate ones and that usually requires some sort of user intervention. Some firewalls do keep dictionaries of program signatures and if the program signature is present, no user intervention needs to be required, depending on how you configure the firewall.
      You also need to consider that many 3rd party firewalls are really HIPS, so different permissions need to be handled. Additionally to the permission to connect to the network, you will have permissions to simply run – and this permission may extend not only to the executable, but also to components the program may use, such as DLLs.

      So, with these 3rd party apps, you get a lot more than with the simple Windows firewall. It’s reasonable to expect a bit more work to configure it and run it. However, after an initial period where such efforts are required, soon it can get almost as non intrusive as with the Windows firewall. As I said before, I run a paid version of Online Armor. Literally weeks go by without any input required by me. Even when adding new programs, permission for them to be executed is, in most cases, given by dictionary.

      I never ran my systems without a 3rd party firewall. Used NIS, ZoneAlarm and 2 years ago, after a really bad ZA period, I went with Online Armor. I won’t go without it, now, and I would never trade the security and control I have over what runs in my PCs and connects to the net, for the “incommunicado” Windows firewall. OA also runs on my wife’s laptop and she is no computer expert. She has no troubles running it. The version I run also uses malware sigs from OA’s manufacturer (Emsisoft) to check any unknown files, only when they try to run. This allows me to have OA plus another AV app (usually MSE, but also Vipre, depending on the computer in question) checking anything that runs on my PCs, for a double layer of security. As we all know, nothing is assured by this, but it has worked quite well for me and I do get some peace of mind from this setup.

      • #1276890

        The version I run also uses malware sigs from OA’s manufacturer (Emsisoft) to check any unknown files, only when they try to run. This allows me to have OA plus another AV app (usually MSE, but also Vipre, depending on the computer in question) checking anything that runs on my PCs, for a double layer of security. As we all know, nothing is assured by this, but it has worked quite well for me and I do get some peace of mind from this setup.

        Do you have the Online Armor Premium or the Online Armor ++ version? I suspect the Online Armor ++ version as this is the version that includes AV/AM.

        I am very impressed so far with the Online Armor firewall and am considering getting a paid version. I do run MSE AV/AM and am pleased with it. Do you mean that Online Armor and MSE both run AV apps on your PC in real time without conflicts? I can get 2 each one year licenses for the ++ version for $95 USD. Does anyone know of a less expensive price?

    • #1276275

      Hi rui, do you get any entries in ‘Event Viewer’ about slow start up of your OA FW, or ‘Action Center’ when starting your PC ? See post #2

    • #1276276

      Hi RR,

      I never had any issues with the Action Center. I was a member of the beta team for OA for a while, until the software changed owners, and while I was there, I remember some users complaining about it. I can’t remember, but I think that had a solution.

      No regular startup issues with OA. My events log has a lot of complaints about lots of apps, but mainly for shutdown. Checking it, there was a log record about OA on the 1st of April and that was a single situation – I have rebooted the PC a few times since then and no more event logs about it.

      OA is now on version 5.0. The new version came out about a week or so (at least I got it then), so maybe give it a try. I know, from my previous beta team experience, that some users never managed to get OA running properly. Those were a very small minority, but it did happen.

      Regards

      Rui

      • #1276284

        OA is now on version 5.0. The new version came out about a week or so (at least I got it then), so maybe give it a try. I know, from my previous beta team experience, that some users never managed to get OA running properly. Those were a very small minority, but it did happen.

        Regards

        Rui

        Hi Rui, it was the latest version I tried (Free) On other times I tried it, it would not install correctly, but this time I turned my AV (Avira) OFF, and although it did work, I got issues as described.

    • #1276293

      Hi RR,

      Well, I am sorry for that. If you want to, Emsisoft’s support forum has some nice, knowledgeable members, so a visit may be worthy.

    • #1276316

      Hi Rui, will stay with new ZoneAlarm even though its ‘Web Engine’ is not compatible with FFox. I’m well protected without it.:crossfingers:

    • #1276335

      I have downloaded the free version of Online Armor and am presently experimenting with it. So far seems more well behaved that the others I tried. Will continue and let everyone know how things work out.

    • #1276415

      Hi RR,

      We all have very different setups, so we just go with what we feel is better for each of us :).

      Regards

      Rui

    • #1276895

      Hi Ted,

      I have the OA ++ version. Online Armor does not run a realtime AV app, that monitors files in real time, as they are being downloaded or accessed, except when they are executed. When a file is executed, OA ++ checks it to see if it is allowed to execute and when checking that, it uses the Emsisoft malware signatures. So, you do have two apps running in real time, but one is the OA HIPS and the other is whatever AV app you choose to use. On my desktop I use MSE, on my laptop I use Vipre, as AV apps. No problems at all, OA is very light on resources, most of the time. The first time you try to run something, it will take a bit more time to pop up the window that asks for permission for the app to run (and to connect to the network, since they are distinct permissions).
      You can also use OA++ to periodically scan the disk. That behavior is similar to regular AV apps.

      Have you checked the 3-Pack 1 year license? It’s currently at 41.50 euros, which is about 60 USD. Sounds a lot cheaper than $95. In euros, right now, two 1 year licenses cost 45 euros, which is still a lot less than 95 USD. Where are you getting those prices from?

      • #1387519

        OK, if a firewall never asks you if it is OK to allow a program to access the internet, how do you know: #1, it is working at all, #2, how does it know if a program is legit or rogue, and #3 even if it is working, why won’t it stop that virus you just downloaded in your email from getting more viruses?

        Zone Alarm does ask you when a new program that ZA doesn’t know about tries to get out. You can select the “remember” box and it will only ask you once. Many times, the first indication I have of something going wrong is when Zone Alarm asks if a program I don’t know about is trying to get to the internet. Now, the free version of ZoneAlarm has nag screens asking you to buy, and that is a PITA, I agree.

        I downloaded the install program for Quickbooks, and when I ran the program the install program just went and got the real program and updates and Windows Firewall just quietly let it happen. This is scarey because I could just as easily have downloaded a virus and ran it. Pretty sure Windows firewall would allow that too.

        You say you don’t want to be bothered with all those pesky popups, While I do understand pesky popups, If you are not in the loop, things will get by you. But, I guess internet security isn’t all that important to you.

        Microsoft Security Essentials, also, is a pretty quiet program. Problem is, Microsoft has never really been that savvy about security. Use MSE for a while, then go to an online virus checker like HouseCall, or the Symantec version and see how many Trojans and other crap MSE let slip by and didn’t even tell you.

        Your computer, but remember, as far as security apps go, if it is too quite, it probably isn’t doing it’s job.
        Mark.

    • #1276898

      Online Armor ++ pricing directly from Emsisoft.

      27825-Online-Armor

      This is for a one year license, 2 copies for my wie’s and my PC.

    • #1276899

      Ted, for me the prices are those that I stated. I guess they may be having a special price for european customers.

      • #1276900

        Oh so you are more special than me!!! :huh: I actually found the Premium for 50 % off (approx $20 USD each), but I would be more interested in the ++ version.

    • #1276901

      Yep, the ++ version provides a bit more of protection. I really like it.
      Sent you a PM.

    • #1276903

      How good is the Premium version for USD $20?
      Emsisoft Online Armor Premium Firewall – 1 Year

      That link came from this CNET review ….
      Online Armor Free

      This site has 3 licenses of Online Armor ++ for USD $55 …..
      Online Armor ++ Firewall 3-Pack [1 Year]

      • #1276979

        This site has 3 licenses of Online Armor ++ for USD $55 …..
        Online Armor ++ Firewall 3-Pack [1 Year]

        This did not come up for me (When I clicked on your link, last of 3) the shopping cart was empty. Glad you got the special price. I have been pleased so far.

        Note: To get wife’s and my PC’s to share, had to go to Firewall, Rules, Computer then right click on computers in list and select Trust, otherwise they were blocked from each other. Spend some time looking at help pages.

    • #1276904

      yes, that is where it was from. The original link shows the differences. The only diff between Premium and ++ is the AV/AM component.

    • #1276906

      The firewall is pretty good on its own. The ++ version adds the additional malware signatures verification to the normal firewall checks, so it is even more interesting.

    • #1276918

      Acquired the OA ++ edition (Thanks to Rui) 2 licenses and installed and activated on both my wife’s PC and my PC. Easy install, OA spent 10 to 15 minutes learning our PC’s, then just runs. Whenever you go use a new app not familiar to OA it asks whether to Trust the app or not the first time. Registered with OA with no problems. So far very pleased with OA ++.

      • #1276921

        Ted – This thread has caught my interest. I am thinking of giving OA a test drive. May I ask which pricing option you chose and your final cost?

        Thanks

    • #1276954

      I chose the OA ++ edition because of the additional features (AV/AM and rootkit checking – see Rui’s post #15) Pricing would depend on the version, number of licenses (one license required per PC) and number of years. I chose 2 copies (mine and wife’s PC) for 1 year. The final cost for US purchasers for 1 year, 2 licenses of OA ++ would be $90 USD. The OA Premium had a special pricing of $20 USD each copy from CNet Downloads. The only thing you loose is the AV/AM component.

      So far I am very pleased with OA. I have used the free version for about a week and installed the product keys to activate the ++ version last night. Rui’s recommendation was right on.

      If you download the free version, and install it, all you have to do is add the product key to activate and unlock the version you choose. Then you register with Emisisoft (click on Log In to set up your registration).

      • #1276977

        Before I order the Online Armor ++, is the Optional: Emergency USB-Stick [2 GB] for $20 also worth adding to the order?

        • #1276980

          Before I order the Online Armor ++, is the Optional: Emergency USB-Stick [2 GB] for $20 also worth adding to the order?

          I did not order this so I can not definitely answer. Perhaps Rui could provide an answer.

    • #1276983

      I didn’t buy one and it seems to be a recent offer (wasn’t available at the time I bought my licenses). I guess the decision lies on whether you think it’s worth to spend the money. There are plenty of scanners you could use with a bootable USB stick, and probably the best idea is to have a stick with several scanners. My “plan” is to build one when I need it (there’s always a spare computer to use for that if another becomes compromised).

      • #1279146

        I ‘ve been using outpost pro for 4- 5 years , has some good features , logging is very good , rules are easy to setup or the are made automagicly if you prefer . So far zero problems on 7 computers

    • #1390186

      MS MSE and internal firewall are bare bones tools that do not deserve to be on machines that have anything more than cartoons on them. Seriously. Do you selves a favor and get almost anything else out there for better protection. Want verifitcaton? Go to sites you should not go to and see how ineffective both are after you have been infected.

    Viewing 21 reply threads
    Reply To: Tried a couple of free firewalls, went back to Win 7 firewall

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: