Windows built in security

[Frick]

This comes from this post about the firewall in Windows 8:

Yep, and you should turn that POS off for private networks.

For Windows 7 the built in firewall was generally deemed good enough if you were behind a decent router. Is the firewall in Windows 8 any different?

 

[R-T-B]

I don't think so. It's MSE's firewall basically in Windows 8, which I think is virtually the same as what Windows 7 had, just with some extra antivirus included.

 

[xfia]

I use it and know its not the best but I just play games and generally look for ways to keep the foot print of the os and running processes low.

 

[Frick]

So what about MSE/Defender?

 

[rtwjunkie]

I have not used it in Windows 8, but IIRC, the Mailman said Defender in W8 is pretty good.

 

[Static~Charge]

So what about MSE/Defender?

According to the results of AV-TEST's latest run, Microsoft Security Essentials stinks when it comes to protecting a Windows machine (came in dead-last).

 

[newtekie1]

For Windows 7 the built in firewall was generally deemed good enough if you were behind a decent router. Is the firewall in Windows 8 any different?

All software firewalls are crap.

So what about MSE/Defender?

Not that good either, but better than nothing.

 

[RCoon]

So what about MSE/Defender?

Extremely lightweight, uses next to no resources. It's not the strongest protection however. I've used Avast, Avira, AVG, BitDefender, ESET NOD32, Kaspersky, Norton(LOL), and even uninstalled McAffee from about twelve hundred PC's.

I still use MSE/Defender though, because it doesn't hog resources like everything else. I just play it safe on the internets. On my gaming rig I still run Avast, but on my steam streamer (which needs the full CPU's power), or when I have to install AV for some donut's laptop they drag into work that's the lowest powered most overpriced 5400RPM pile of ass, I install MSE, because it's non-intrusive and lightweight. I guess you have to work with tradeoffs in the AV business.

For monster rigs like most of the forum's users, any AV is fine. For low end domestic desktops/laptops, I try to use the lightest program possible depending on how much a user likes download porn or streaming movies from some obscure website hosted in Costa Rica.

 

[Eric_Cartman]

If you are smart, you don't need any firewall or AV.

 

[Jetster]

Any software firewall has its limits. But a router will stop all unless you let it through. As far as MSE and Bit Defender they are fine

 

[rtwjunkie]

If you are smart, you don't need any firewall or AV.

That's a little bit like saying you will be travelling to an Ebola epidemic country (the internet), and saying you're not going to wear any protective gear, and just be smart about who you come in contact with. You can't always know. It's not a matter of "if", but "when."

 

[Eric_Cartman]

No, because the smart people don't travel to an Ebola epidemic country. Problem solved, no protection needed.

 

[rtwjunkie]

No, because the smart people don't travel to an Ebola epidemic country. Problem solved, no protection needed.

So you know every single website to stay away from. Immediately when on the internet, you are aware of every drive-by trojan etc. You must be all-knowing. I should hire you for my IT security.

 

[Jetster]

If only you could cure Ebola with a format

 

[Rhyseh]

If you are smart, you don't need any firewall or AV.

I would still advise people get one. I got an ad-ware infection recently when I was drunk and trying to download some screen capture software for a product demo.

 

[Solaris17]

If you are smart, you don't need any firewall or AV.

do you browse the internet with a TI-86 plus or something? I would seriously recommend an AV suite to anyone.

 

[Kursah]

All software firewalls are crap.

I was under the impression, at least in my experience that hardware firewalls run a software firewall.

Granted they're still far more secure than Windows, it's better to have a software firewall than nothing at all for at least the most obvious of attempts to intrude through an open port.

Honestly, Windows Firewall + a decent router (maybe with DDWRT or similar) or a PFSense box + a good DNS service like OpenDNS (instead of your ISP's) will resolve a lot of issues for many users.

Not that good either, but better than nothing.

Agreed, MSE is better than nothing, that + MBAM 2.0 Free/Premium is a solid combo that's light on resources. It's no enterprise solution by any means, and other freebies like AVG will do a better job than MSE at a cost on resources.

 

[Toothless]

I use Defender and call it good. Got tired of BitDefender and Avast kicking me in my manly place whenever I wanted to use my CPU.

 

[Naito]

Smart browsing and computing habits go a long way in reducing the risk from firewall/AV exploits, but for the rare occasion something inevitably circumvents Windows Defender, I have complimented it with Malwarebytes Premium. Unfortunately, Malwarebytes is now a subscription-based license rather than the lifetime license I got many moons ago.

EDIT: I don't know if it is still the case, but a few years back when I studied a computer security course at university, many third-party firewall applications were merely a more user friendly front-end for the default Windows Firewall application. The only really difference is they applied their own rules and notified the user more often, etc.

 

[Frick]

If you are smart, you don't need any firewall or AV.

Smart browsing habits goes the longest way when it comes to AV, but firewalls is a different story as it has a completely different job and a vastly more important one at that. You cannot live without a firewall man.

All software firewalls are crap.

Ahh so that is what you meant. Are you seriously saying you shouldn't run software firewalls then (as you hinted at in OP)? That's pretty daft.

 

[Static~Charge]

If you are smart, you don't need any firewall or AV.

Famous last words. Like saying "If you are smart, you don't need any seatbelts or airbags in your car." Sometimes it isn't what you do that's the problem....

 

[REAYTH]

I have not used it in Windows 8, but IIRC, the Mailman said Defender in W8 is pretty good.

Actually Mailman has since changed his tune. He turned me on to Bitdefender Free and its been rock solid so far. He also changed to it with Malwarebytes. I'm sure he will tell you more when he's back from one of this TPU "vacations". I think he said he got like three months.

 

[rtwjunkie]

Actually Mailman has since changed his tune. He turned me on to Bitdefender Free and its been rock solid so far. He also changed to it with Malwarebytes. I'm sure he will tell you more when he's back from one of this TPU "vacations". I think he said he got like three months.

I agree it's better! BD Free is a very good choice, which I recommend to people I know that are less than skilled or attentive to scanning, since it does everything for you.

 

[newtekie1]

I was under the impression, at least in my experience that hardware firewalls run a software firewall.

All firewalls are software, it is just a difference of where that software runs. But the terms "software firewall" means a piece of software installed on the computer, the term "hardware firewall" means firewall software running on dedicated hardware(or semi-dedicated hardware like a router).

Granted they're still far more secure than Windows, it's better to have a software firewall than nothing at all for at least the most obvious of attempts to intrude through an open port.

This is true. If you are going to directly connect a machine to the internet, or connect to any public network, then you should have a software firewall enabled. And in that instance the built in Windows one is sufficient.

Ahh so that is what you meant. Are you seriously saying you shouldn't run software firewalls then (as you hinted at in OP)? That's pretty daft.

Yes, basically that is exactly what I'm saying for computers connected to private networks. Again, it is important to acknowledge the whole statement not just parts of it. When your computer is in your home connected to your private network that you control, a software firewall is pointless and isn't nearly as good as the hardware firewall in your router. If you are going to your local starbuck and connecting to their wifi, then yes turn on your software firewall because it is better than nothing(which is the only alternative).

 

[eidairaman1]

Even normally innocent sites can be attacked via drive by.