Which Firewall?

[Saracen999]

Until a few years ago, I mostly used Comodo Free firewall. Since then, i've used the Windows built-in firewall. And no, I'm not aware of any issues so either it's been working fine, or i have a problem I don't know about. There is also a decent router-level firewall running, so I'm not that worried about PC-based stuff. Just .... reviewing the situation.

What this post is about is that this is a kind of subject I just like to review every once in a while, to see if I'm missing a trick. So I'll probably end up just staying with the default ... unless a better option shows up.

Parameters :-

- initially it's for a single PC. I might add a couple more later.
- I don't mind paid-for provided it's reasonable, but
- not a subscription. I'll buy a lifetime licence but I'm not subscribing.

This started because a friend recommended Glasswire. Well, looks pretty but, the options seem to be either a very basic version with most features disabled, which looks to me to be typical bait 'n' switch, or subscription. Also, one of the most obnoxious websites I've ever seen, with a persistent LARGE ad for a discount, which seemed to be unremovable (other than backpage) that stopped me even looking at the feature comparison. Eventually, having tried all the obvious methods to get rid of it, I used an ad-Blocker which worked for a while, then seemed to cause the while damn website to freeze.

So, not nterested in Glasswire, however good it allegedly is.

On checking out Comodo, it seems that the standalone firewall is no longer developed, and the current option is bundled with Antivirus. Fair enough, perhaps ... for most people. I don't want AV software. Already sorted on that front. Which seems to leave me with a used-to-be-good abandonware firewall, or a package I don't want. So, nix on that, too.

Those two examples should give a view of what I'm considering - is there a free or modestly-priced perpetual-licenced, non-subscription firewall I ought to think about, before deciding the Win 10 default one will do, which is where this exercise currently is heading.

If anybody has good ideas, it'll be you lot.

[AGTDenton]

I'll be interested in this too. Of all the things I've never bothered about it's a software firewall beyond that of the OS.
There could be some hidden gems out there worth investigating

ZoneAlarm was the defacto standard for a long time.

[Jonj1611]

I have been through them all but my use case was limited. I only ever really did home networking, web browsing, online gaming etc. I found all gave a slight performance drop.

In the end I have just returned to the built in Windows 11 (boo hiss) firewall. Its pretty compentent and does the job required of it. And believe it or not if you go into the advanced settings of the built in firewall you can do pretty much what paid firewalls do like set apps you want allowed/restricted etc

[Saracen999]

Thanks. So far, what I kinda expected.

I used to use ZoneAlarm but went off it somewhat oh, years and years ago. I didn't update for a while and when I did, it wouldn't, and trew all sorts of tantrums. I ended up spending ages going through a manual delete process, dozens of files in several directories, just to be able to completely remove the old version. Took me hours. That was when I went to Comodo.

I'm not convinced there actually is a good, standalone decently-priced 9or free0 option any more. Expensive corporate stuff, yeah. Subscriptions to "security suites", yeah. But good yet simple firewalls, better than the built-in one? Not so much ... that I can find.

Though .... that's a good result, if true. I can can relax and stick with the status quo.

[AGTDenton]

So far Tinywall is the only one I've found that I'd consider trialing.
https://tinywall.pados.hu/features.php

Looks like Zonealarm fell by the wayside a while ago. I still have a version prior to its aquisition.
Since Windows XP I've not used one on a personal level. I think it was SP2 where they revamped a lot of the inbuilt firewall and started with Defender, though standalone at that point. That's when I decided 2000 was finally outdone and made my transition.

Regarding Comodo, I think you can deselect the AV portion of the bundle during installation, but don't hold me to it.

[DanceswithUnix]

I've settled with whats built into Windows and Linux for firewall (and even antivirus in the case of Windows).

I do have two firewalls between me and the Internet, a consumer grade router which serves Internet to a Linux box with two Ethernet interfaces, so the internal network is behind the Linux box. That gives me an extra layer if the router gets pwned.

[badass]

If you're looking for just firewall features - i.e. blocking network connections in and out without checking the content - i.e. allow traffic from 192.168.1.1 on port 80 then you cannot beat the Windows built in firewall IMO. It is incredibly flexible/configurable and pretty simple to use in its default state. The only security downside is that it's too easy for an app to request an exception and the user to just click allow without thinking. However I suspect you think very hard before clicking allow on anything, Saracen!

If it's for a PC on a home network only then the Windows firewall is fine. If you're looking to accept incoming connections from the internet, it gets complicated very fast.

I say this as someone that also regards Microsoft as a shoveller of **** software wise and absolutely hate Windows 11 for context. For more context, I work in a senior technical position in Information Security.

[Saracen999]

@badass .... good call. I'm pretty careful, and sceptical, about clicking on anything I'm not expecting, and ... shall we say, 'guarded' even if I am expecting it.

Thanks, everybody. I think the general concensus here pretty much backs up what I thought, and have been doing. It can just do no harm to check I've not missed something obvious and easy.