ZoneAlarm Firewall Pro Is The Best Firewall Software Around
ZoneAlarm Pro is the top-rated firewall program by almost every source that has reviewed the program. ZoneAlarm includes identity theft protection, spy site blocking and network protection. It also blocks popup ads, screens e-mail and prevents itself from being shut down or disabled by outside sources. Reviews say that ZoneAlarm Pro Firewall Protection is user-friendly; the interface is easy to understand. We did read some reports that ZoneAlarm Pro can conflict with other software, however. A free version of ZoneAlarm is available, but the latest reviews say the free version isn't as good as others
A firewall protects a computer against unauthorized access by hackers, hijackers, nefarious websites and malicious software. All firewalls, except the one integrated into Windows XP, also block threats already on your computer from communicating with the perpetrator or a third party so that hackers can't gain access to your personal data or computer. Hardware and/or software firewalls are essential components of computer security.
A firewall is a barrier between the Internet and your computer. The computer term is named from physical firewalls in buildings or cars that block fire from spreading. A firewall is also analogous to a lock on a door: it prevents those without keys or access codes from entering. Firewalls enforce security policies. These policies or rules are in the form of built-in (usually user-controlled) filters that permit access only to authorized users.
There are two types of firewalls: software firewalls and hardware firewalls (such as those built into routers). Both examine the data that comes from the Internet and into your system. When packets of information enter your computer, the filters examine them for the source of the data and the destination of the data. The firewall does this by comparing this incoming information to the criteria set or established by the filters. If the information passes scrutiny, the information is forwarded on to its destination. Any unacceptable data is deleted or blocked before it reaches your hard drive.
Firewalls can also control the traffic that comes into and out of your computer system. A good firewall is customizable. This means that you can add or remove the filters that you want. With a firewall, you can set up these rules to restrict the information that is allowed to enter your home computer or network. Practically speaking, these rules give you control over what websites people can view or what activities they can perform. Users can grant or deny access to specific sites, and most firewalls have a preapproved list of common, reputable websites, which shortcuts configuration.
Every computer has a unique numerical IP address, which is used to identify your particular computer on the Internet so you can receive e-mail and view websites. A firewall's filters can hide your computer's IP address, making your computer invisible to hackers. Your computer uses ports to connect to various services. HTTP (Internet), for example, uses port 80. FTP (file transfer protocol) uses port 21. A firewall can close unused ports to prevent an attacker from entering through an open port. Another firewall filter can block specific domain names. You can also configure the firewall to prevent FTP activity (which allows you to upload or download files to and from the Internet). There are also filters relating to words or phrases, which allow you to block access to sites containing objectionable material.
Windows XP and Vista firewalls
If you use Windows XP or Vista, you are already protected by their included firewalls, but most reviews still say you will likely be safer with a third-party firewall. Windows XP includes a rudimentary firewall, but it only protects against inbound threats. Microsoft's new operating system, Windows Vista, includes a more robust firewall that also protects against outbound threats. Microsoft is touting security enhancements as a main reason for upgrading. Most of the reviews we found of Vista are of beta versions in various stages of development. Computer magazines are brimming with excitement and criticism about Vista. In spite of the buzz, no one has tested the performance of the Vista firewall yet or compared it with third-party firewalls. We do cover a couple of good reviews that focus on Vista's security features and evaluate the look and feel of its firewall.
The Windows XP firewall is turned on by default when you install Service Pack 2 (SP2). SP2 also includes a Security Center that allows you to easily control the Windows firewall, as well as third-party firewalls and antivirus applications you may have running. With SP2 installed, Windows will alert you when updates are available for third-party security applications.
The consensus among reviewers is that the Windows XP SP2 firewall is merely adequate. Reviewers such as PC Magazine's Neil Rubenking say that several free third-party firewalls are a significant upgrade from the XP firewall. WebUser.co.uk's Brad Jackson describes the default option as "a workable measure of protection for those who don't like the setting up and interaction involved in other firewalls, and would otherwise be going unprotected." Yet, he adds, "However, this is a risky strategy and we'd thoroughly recommend installing one of the more sophisticated firewalls instead."
Because the XP firewall only monitors inbound threats, Computerworld.com's Scot Finnie and Preston Gralla say that "If your PC [is] invaded by a Trojan or spyware, those programs would be allowed to make outbound connections unimpeded." Reviewers say that this is the key reason why they recommend using a third-party firewall. To rely completely on the SP2 firewall, you'd need to be certain that your computer harbors no intruders already, such as previously downloaded programs that might be dialing out. In that case, blocking inbound traffic might be enough. Other firewalls not only block incoming traffic, but also monitor Internet activity initiated from your computer. This enables them to catch intruders that have been planted in your computer, and are trying to pass personal information and files to a tracker, hacker or hijacker.
At least on paper, the Windows Vista firewall is a big improvement since it monitors outgoing traffic as well as inbound traffic. If you already plan to upgrade to Vista or buy a new computer, you may wish to use a free firewall program in the interim, and wait to learn whether the Vista firewall will be adequate for your needs. It's also not clear at this time which third-party firewalls will work with Vista. Microsoft says that BlackICE and Norman Personal Firewall, two programs that performed poorly in reviewers' tests, aren't even compatible with Windows XP Service Pack 2.
Patrick Marshall of Federal Computer Week (FCW) says of Vista, "The new firewall is more configurable than firewalls in previous versions of Windows, but it still does not match the configurability of most high-end hardware firewalls." Reviews in FCW and ComputerWorld imply that the Vista firewall interface is complicated to use. We'll revise our report when more reviews firm up their opinions on the Vista firewall.
For a third-party firewall, more experts recommend ZoneAlarm Pro Firewall Protection more than any other program. A basic, bare-bones ZoneAlarm firewall is free, but not as robust. The latest version of ZoneAlarm Pro Firewall Protection is bundled with anti-spyware software as a bonus. ZoneAlarm Pro includes identity theft protection, spy site blocking, privacy protection, and a new feature called game mode that allows the user to turn off program alerts (like a "do not disturb" sign).
ZoneAlarm Pro Firewall Protection is rated as the best software firewall by Personal Computer World and CNet.com. CNet's Robert Vamosi claims that ZoneAlarm is fast and efficient. Vamosi says, "As new threats emerge, ZoneAlarm Pro Firewall Protection is able to pass along new firewall rules and, in the case of extremely malicious activity, shut down any program that attempts dangerous activity." He also likes the interface.
Although Matousec.com isn't satisfied with any of the firewall programs it tests, the organization concedes that ZoneAlarm Pro Firewall Protection is the best of the bunch. It performed very well in most tests. ZoneAlarm Pro ranked in the top three programs tested for leaks by Firewall Leak Tester. Computer Shopper and InformationWeek recommend the free version of ZoneAlarm, which is a very stripped-down version of ZoneAlarm Pro. A review at PC Today says, "Even the free version includes an up-to-date interface and well-thought-out design." The free version does need a lot of user configuration. After installing ZoneAlarm, you must respond to numerous confirmation popups to teach ZoneAlarm what programs are allowed. ZoneAlarm Pro does a lot of this work for you, with a preapproved list of several thousand highly reputable websites.
ZoneAlarm Pro Firewall Protection automatically disables the Windows XP SP2 firewall to prevent conflicts. Technical support is free on the Internet, including chat and a user forum, but phone support costs $2.95 per minute. Only a few ZoneAlarm Pro 6.5 users have posted comments or reviews on websites that invite customer reaction. All the CNet.com readers complain about conflicts with other software, which is a common complaint about other ZoneAlarm products. ZoneAlarm, Norton and McAfee products experience the highest percentages of conflicts, according to owners reporting trouble.
For non-business users, free firewalls may give you enough protection, especially if you are using a hardware firewall as well (such as a wireless router). Free firewalls often don't have as many customizable features, and they can take more work to configure. One of the best-known free firewalls is the free version of ZoneAlarm. In coverage at PC Magazine, editors say ZoneAlarm is a good firewall for those using older Windows operating systems, but overall testers recommend a different free firewall.
Important Considerations: Firewalls
Experts recommend keeping these factors in mind when selecting and using security software:
|
·
|
If possible, start with a clean computer. If burglars were already in your house, you wouldn't just install a new lock and then expect to be safe. Similarly, it's wiser to install a firewall before your computer is already harboring anything nasty. It may take more than one anti-spyware application to catch all the spyware on a computer. See the ConsumerSearch reports on anti-spyware and antivirus software for recommendations.
|
|
·
|
Reviews recommend using a (wired or wireless) router with its own firewall as the first layer of protection, with the software firewall as the second. This is worth consideration even if you don't have a network. (See the ConsumerSearch report on wireless routers for details.)
|
|
·
|
Though you have security software installed, you must still monitor your Internet behavior. Research before clicking on an ad or download, and don't open e-mails or attachments that look suspicious. Stay up to date about the latest Internet dangers by browsing computer news sites or subscribing to e-mail alerts. (See the Best Research section below for recommendations.)
|
|
·
|
Disable file and printer sharing if you aren't using this feature.
|
|
·
|
When choosing a firewall, be sure to check system requirements. Choose the correct version for your operating system. All work with Windows XP, but some don't work with older operating systems.
|
|
·
|
Update security software regularly. Be sure your software is set to check for updates automatically, preferably at least once a day. Most security software does this automatically.
|
|
·
|
After the firewall is installed, test that it's working properly. Use a testing site like Security Space Desktop Audit (http://www.securityspace.com) or one of the websites listed in the Best Research section below to make certain your firewall is working properly and is configured correctly.
|
|
·
|
Turn on auto-updates or regularly check the Microsoft website for security updates and patches to the Windows operating system. It doesn't take long for hackers to exploit vulnerabilities in Windows operating systems, and keeping your system up to date is the best foil. If you're running Windows XP, be sure to update to Service Pack 2.
|