Re: [Full-disclosure] PC Firewall Choices

[John LaCour <johnlacour@xxxxxxxxx>]

On 1/17/06, Valdis.Kletnieks@xxxxxx <Valdis.Kletnieks@xxxxxx> wrote:
>
> Even more important, a hardware firewall can't be compromised as easily
> by malware that's on a host behind the firewall.  It's easy for a program
> on a PC to tell ZA to look the other way.  ...

Not all security software is equal.  ZA actually does a very good job
of protecting
itself from tampering compared with the vast majority of AV/AS/FW software.

A hardware firewall has no knowledge of the application involved which is
another dimension to policy that a desktop firewall gives you control over
which a hardware firewall does not.

Personally, I advocate using both.

-John
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/