Want CNET to notify you of price drops and the latest stories?

Why the Windows Firewall comes up short

This important security function is better handled by a third-party program. Windows Firewall doesn't monitor outbound connections by default, and not at all in Windows XP.

Dennis O'Reilly Former CNET contributor
Dennis O'Reilly began writing about workplace technology as an editor for Ziff-Davis' Computer Select, back when CDs were new-fangled, and IBM's PC XT was wowing the crowds at Comdex. He spent more than seven years running PC World's award-winning Here's How section, beginning in 2000. O'Reilly has written about everything from web search to PC security to Microsoft Excel customizations. Along with designing, building, and managing several different web sites, Dennis created the Travel Reference Library, a database of travel guidebook reviews that was converted to the web in 1996 and operated through 2000.
Dennis O'Reilly
2 min read

My previous post on free alternatives to Windows' built-in utilities confused the Windows Firewall with Windows Defender, which protects against viruses. (My thanks to the folks who pointed out the error.)

The fact is, I stopped paying attention to both programs a long time ago. First, I decided security is too important to leave up to Microsoft. Second, I can do without the hassle of managing separate applications for various security tasks. To me, the time I recover repays the cost of a security suite many times over.

So what's wrong with the Windows Firewall? It doesn't monitor outbound connections by default, and not at all in Windows XP. You can change some Windows Firewall settings in the Security Center (click Windows Firewall in the left pane and then choose "Change settings"). However, the majority of firewall settings are accessed via the Administrative Tools Control Panel applet, which you can open in Vista by pressing the Windows key, typing wf.msc, and pressing Enter.

Windows Firewall with Advanced Security
The Windows Firewall with Advanced Security applet lets you customize the security program's rules. Microsoft

The best reason to use a third-party firewall is because they're clearly better than the Windows Firewall, and several are free. Top Windows Tutorials compares the XP and Vista versions of the Windows Firewall to the ZoneAlarm and Outpost firewalls. (Note that the free version of the Outpost Firewall is no longer supported.)

The top-rated firewall in Matousec Security's most recent shootout is the free Online Armor Personal Firewall, which was the only product to merit a rating of "excellent." Seven other software firewalls were rated "very good," two of which are also free.

You'll find technical details about the Windows Firewall in this Microsoft TechNet article and information on customizing the program in this article on the same site.

Microsoft offers a troubleshooting tool for the Windows Firewall in XP. If you're having problems with Vista's built-in firewall, check out this troubleshooting guide on Microsoft's TechNet site.