Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

Router firewall or ZoneAlarm???

Jan 24, 2005 8:46AM PST

Hi all. I have a wireless router, (DLink), with a built-in firewall and was wondering if that's enough protection from things like virus' and spyware, or if I should also install Zone Alarm? I use Spybot and AdAware SE for spyware and adware elimination, but I'm wondering if my router's firewall is sufficient enough to do away with the need for Zone Alarm.

Thanks.

Discussion is locked

- Collapse -
Zone Alarm:- Speed. SPF-: Features
Oct 20, 2005 9:40PM PDT

On the contrary, I found that SPF takes a very long time to start on my desktop (PIII 450 Mhz, Win XP Pro SP2). Using Zone Alarm reduces the time significantly. However, my more powerful notebook (PIV (M) 1.6 GHz, also Win XP Pro SP2) doesn't take that long, so I use SPF on the notebook. After doing scan tests, both are equally effective but I still prefer SPF because there's a bandwidth meter (not sure how accurate it is) and I can see exactly which programs are using bandwidth at the moment.

Luke

- Collapse -
use both
Oct 14, 2005 5:48AM PDT

use both Zone Alarm Pro works the best with routers and it tells you if something is trying to get out, maybe with some of your personal info. And might even protect you if someone happens to get into your network and then into your computer. you also need anti-virus and several spyware programs and I mean several, because one does not do it all I use spybot, ad-aware and the new microsoft beta version.

- Collapse -
i disagree
Aug 19, 2007 2:43PM PDT

Having more then one firewall does not do anything. Get linux, learn it and use it. As well as get a hardware firewall. Pay some big bucks for the good ones. Then have google some ip filter firewalls for linux.

- Collapse -
More is better
Jan 27, 2005 4:09AM PST

You are better off using both a hardware (router) firewall AND a software firewall like ZoneAlarm. Your router can stop hackers from getting into your computer, but still allows spyware and any other malware already present in your drives to "dial home" and/or cause other havoc.

Viruses, worms and trojans can infect your computer regardless of the presence of a firewall, which is why you need to run antivirus software. It is not clear from your inquiry whether you currently do. If you don't, download the free AVG Antivirus or purchase one of the products from Symantec (Norton Antivirus), Trend Micro (PC-cillin) or another reputable company. Having antivirus software running in your computer is a must for real-time protection. Scanning your drives with a web-based engine is simply not enough.

ZoneAlarm, antivirus software and Spybot S&D will complement each other nicely and offer excellent protection - provided you keep the software up to date. Consider your hardware firewall icing on the cake, another line of defense. If you'd prefer to have everything integrated in one package, consider investing in the ZoneAlarm Security Suite or Trend Micro's PC-cillin Internet Security 2005.

(If your operating system is Windows XP, make sure to disable its built-in firewall if you install ZoneAlarm or another third-party firewall.)

- Collapse -
I also use Both
Jan 27, 2005 7:51PM PST

While the router firewall is good protection from "hackers" (I use that term lightly) from getting through an open port to your system, it doesn't give you any indication of what programs you have on your system that are trying to get OUT of your computer to the internet. Adware/Spyware needs to get out of the computer and a soft firewall will help you contain what gets loose and also alert you to what programs you have running that you may not even know you have installed.

- Collapse -
Zone Alarm does not work
Oct 14, 2005 3:25AM PDT

I use a Linksys router and Zone Alarm does not work with it. I have to use the Windows XP firewall.

- Collapse -
Zone Alarm does not work with Linksys?
Oct 14, 2005 7:32AM PDT

I have used both for years. Works great! Why is your's not working? What errors or other indications are you getting that this is not working?

- Collapse -
Reply to Zone Alarm does not work
Oct 15, 2005 3:43PM PDT

I have a Linksys router and have no problem using Zone Alarm. I have Windows 2000 professional.

- Collapse -
Xp firewall is not enought
Oct 19, 2005 4:01AM PDT

I have the same problem but I can not afford to not use the linksys router and zone alarm. Yes, it's slowing thing down a little but it's better than nothing.

I have a linksys wrt55a&g with latest zone alarm.
Leaving your system with just xp firewall or without a router is very dangerous. My secured logon and ebay / paypay was compromised.

If I were you, config your linksys and change the default ip to something else as oppose to the standard 192.16.1.1, secure you wireless broadcast with mac address or ip's to your box, use encription for wireless.

Install zone alarm as well. The main problem I have with zone alarm is processing speed on my cpu is slow. I was told that it needs to learn form you. Zone alarm will adjust and learn from you ie.. where you go, what application you are using. At first, I figure xp firewall and linksys router will be enought but their hackers out there that will record your keystroke and getting access to your so call secure user name & password. That's when zone alarm kick in.

Anyway, I am having the hardest time with linksys router and BitComet P2P application. With the linksys router (port triggering & forward configured)I can never get the same speed as oppose to no linksys with just zone alarm. According to 2wire my speed drop in half with the routers.

Why???????????????????????????
Help???????????????????????

duke_nukem@sbcglobal.net

- Collapse -
Zone Alarm still blocking intrusions with a router!
Jan 27, 2005 8:09PM PST

Short two word answer: Use BOTH! Explanation: I was using XP Pro with Zone Alarm and Norton System Works for the Anti-Virus. I added a Linksys switcher/router later when I hooked up a 2nd computer in the house. I left Zone Alarm on. I updated to XP SP2 and ran both the XP and Zone Alarm firewalls for a while but later found out that Zone Alarm and the XP firewall weren't supposed to play well together. Even though I'd had no known conflicts, I disabled the XP firewall leaving Zone Alarm on. Since installing the router about two years ago, Zone Alarm status shows it has blocked about 600 attempted intrusions, over 100 of which were termed serious attempts. A router must allow PORT 80 to always be open so you can communicate with the Internet. So it seems logical to me that any intrusion attempt that goes through Port 80 would be a hazard. I've also heard that Zone Alarm and certain file sharing software such as WinMX don't play well together if that is a consideration for you look at other software based firewalls. XP will display a pesky balloon warning about your XP firewall being disabled everytime you boot up and I have yet to find a way to disable that, so I just click the "x" after every reboot. Someone in this thread also recommended SPYBOT which I use and recommend. I also recommend ADAWARE from Lavasoft.de. Spybot finds things Adaware doesn't while Adaware finds things Spybot doesn't. Combine a competent auto-updating anti-virus with Zone Alarm, Spybot and Adaware behind a router or other hardware firewall and you should have near 100% security. About two years ago I asked a friend who works at Microsoft to hack into my machine and he couldn't do it. That's good enough for me.

- Collapse -
Stopping XP Firewall
Jan 27, 2005 8:44PM PST

Control panel, security center, firewall, recommendations, click box 2/3 down on left.

Problem solved.

Eric

- Collapse -
To disable the balloon Vasser
Jan 27, 2005 9:31PM PST

Go to start/control panel and double click on "Security Center". On the left side it has a question mark and says "resources". The bottom selection says "change the way security center alerts me". UNcheck the top box that says "firewall, alert me if my computer might be at risk because of my firewall settings". That SHOULD take care of the balloon.

- Collapse -
Thanks Roddy
Jan 27, 2005 10:50PM PST

Thanks Roddy, I'll try that!

- Collapse -
(NT) (NT) You're welcome Vasser
Jan 27, 2005 10:56PM PST
- Collapse -
It worked EXACTLY
Jan 28, 2005 9:19AM PST

It worked EXACTLY like you said Roddy! THANKS. One less thing to click on!

- Collapse -
(NT) (NT) You're welcome :D
Jan 28, 2005 9:51AM PST
- Collapse -
Not available
Jan 28, 2005 4:53AM PST

"The bottom selection says "change the way security center alerts me"."

Grayed out in my WinXP Pro.

- Collapse -
admin rights?
Jan 31, 2005 12:23PM PST

Perhaps you have to be logged in with admin rights to do that. That would explain the grayed out options. Make sure you have admin rights and then try it. That procedure worked fine on my XP Pro and saves me the trouble of getting that warning everytime I boot up.

- Collapse -
But is ZoneAlarm firewall really running?
Oct 21, 2005 4:25AM PDT

When I installed ZA it replaced my WinXP Pro SP2 firewall, I believe automatically. I never get a popup while ZA is running but if I turn it off, then Security Center alerts me that my ZA firewall is off.

So, my question is: Is this person really running ZA firewall or any firewall since she/he is ignoring the Security Center popup and has probably now diabled the popup warning altogether?

I use ZoneAlarm Security Suite 6.0, BTW, which handles my firewall along with my virus and spyware detection and removal needs. And it works wonderfully protecting my PC - so much so that I now have it on 2 other PC's running on my wireless network at home.

- Collapse -
Zone alarm's blocking intrusions because your router's open!
Jan 27, 2005 10:05PM PST

Routers don't need any open ports - not even 80. Opening a port on the router allows someone on the internet to connect to your computer on that port. Thus, those 600 connections you have are because you opened port 80 on your router, and then zonealarm had to tell them they had no business talking to your computer. Connecting outbound on port 80 will always work to surf the internet (unless you get fancy and specifically disable outbound 80 in the router.)

So why do they allow opening ports in the router? So you can run a web server on your home computer (in which case you'd have to allow inbound connections on that port through zonealarm also.)

So, if you're very cautious about how you configure the router (and don't change any default setting without thoroughly understanding what you're doing) the router's sufficient.

I'm a MS certified systems engineer, and run 3 servers hosting 10 domains, serving both web and email from my house, plus another half dozen computers. A router and anti-virus works just fine for me.

- Collapse -
Chuck5761, I've not opened any ports on the router
Jan 27, 2005 11:44PM PST

Since I'm completely self-taught and not MS certified it is kind of you to share your knowledge. To clarify, I did not set my router to open port 80 or any other ports. Other than one firmware update from Linksys the router is unaltered. How else could these attempted intrusions occur? Can I fix it? Perhaps they explained how this could happen in your MS Certification class and you could share it. I assumed the router left port 80 open so the internet connection would work both ways, but I didn't manually configure the router to open any ports. So, if they aren't coming in on port 80 I don't know how they could be happening, yet they are.

Anyone who takes 30 minutes to download, update and run Adaware and Spybot on any computer used to surf the net might be surprised at what they find. Mostly they find tracking cookies, but every so often they find other more nasty things.

- Collapse -
Port 80
Jan 29, 2005 3:13AM PST

Most virus problems will start with port 80, then once in place will open additional ports. Many things reported by a firewall are harmless,although they have potential to be destructive. The firewall software creators want you to have something to look at , so that you can tell that it is working.

Many home routers come through a user programable firewall that you access online to customize to your personal taste, such as SBC DSL service provided by the phone company, and several cable internet providres. HOWEVER, some simply supply you with an unprotected access point to the web. Call your provider and ask.

You can run as many firewalls and "resident" spam blockers as you want, but each will add some degree of lag, meaning that it will slow you down. If you have a fast service,and a fast computer, you may not notice.
Some special file sharing programs require that you have additional ports opened, so that they may operate properly, and some home networking and server applications require additional ports. The software you use to set up these applications may have trouble interfacing with mulitple firewalls, to set them up correctly.

Bottom line...If your service provider claims to have a good hardware/software firewall inplace, then a GOOD anti-virus program that checks email, and a couple of good Anti-Spam programs are all that is necessary. I would personally suggest the new free Microsoft Anit-spam program which is free, and the free SpyBot Search and Destroy program. If you feel you really want an additional firewall, the Windows firewall that comes with Service Pack 2 (WinXP) is a very user frindly and effective one that is FREE. If you are ANTI MICROSOFT, then ZoneAlarm works fine. That should keep you up and running worry free for many days ahead. HOWEVER, you should understand that no matter what you do....the chance is always there that something bad could happen, so back up your "can't loose" information to CD/DVD, and forge ahead in peace.

- Collapse -
Remote Desktop use
Oct 13, 2005 11:14PM PDT

If someone wants to access an xp computer with Remote Desktop from ''outside'' what port do you open and how safe is it? Thanks

- Collapse -
Remote desktop
Oct 14, 2005 12:44AM PDT

Terminal server and Windows Remote Desktop both use TCP port 3389

- Collapse -
I agree......
Oct 14, 2005 12:39AM PDT

A router is is all you need. The router adds safeguards to your network that non-router networks (even with a software firewall) cannot protect.

- Collapse -
Zone Alarm still blocking intrusions with a router
Jan 28, 2005 9:43PM PST

Obviously you have a router that does not have a built in firewall. I run Zone Alarm behind a Linksys firewall router and Zone Alarm has not had to block an intrusion since installing the router. Routers come with and without firewalls.

- Collapse -
Got a firewall
Jan 31, 2005 12:24PM PST

It has a firewall.

- Collapse -
Some Routers default to firewall off
Oct 14, 2005 8:28AM PDT

My SMC Barricade has a good firewal - I'm well protected by it with no software firewall needed, **BUT** when I first got it and I nosed around in its setup program and went into the "advanced" area where the firewall settings are I saw to my dismay the default as shipped is firewall service turned off. You have to actually turn the firewall on and "apply" the change.

What a silly default.

If I had taken the easy way out and used the "express setup" (avoiding the details of advanced setup) I would have never seen this.

- Collapse -
Another overlooked tool
Jan 29, 2005 11:38AM PST

Vasser seems to have forgotten another free tool in the fight against spam, privacy, tojans, etc. The Yahoo! Toolbar not only blocks pop-ups but it now has an Anti-spy function that recently discovered Viewpoint's Media Player as a spyware. In my arsenal, I use all of vasser's recommended programs plus the Yahoo! & Google toolbars and Window Washer as well. Zone Alarm does its job very well for a free program but if you like to tweak a lot, the Zone Alarm Pro provides lots of opportunities and in my humble opinion, well worth the money spent.

- Collapse -
clutter
Jan 29, 2005 3:21PM PST

Hello atinfante

Every additional program, toolbar, process etc takes additional resources and screenspace. I like to keep my computer and interface as clean and mean as I can and this keeps things fast and problem free. Why not use Firefox and forego the additional toolbars, most of which are spyware themselves but for their own purposes. Firefox has built in popup blocking and does not have the inherent holes in Microsofts IE that allow drive by downloads from unethical websites.

Michael