Are software firewalls necessary if u have NAT firewall?

Question

I hear NAT firewalls are completely fine for blocking incoming traffic, but software firewalls are needed to block spyware/adware from making outgoing connections to the internet. However if i scan regularly for malware is it really necessary to have a resource consuming software firewall?

Answer 1

Most home network routers include a built-in hardware firewall (NAT-enabled) that monitors and blocks inbound communications at the network level.



By comparison, a PC firewall can monitor and block both inbound and outbound communications at the PC level. For the most complete protection, a PC firewall should be installed on every computer on a network. Combined, a router's firewall and a PC firewall provide multiple layers of protection that a router firewall couldn't provide by itself.



Even if you scan regularly for malware, and practice safe surfing habits, you cannot be entirely sure that your computer will never be infected. There is an old saying in our industry that the only way you can be sure your computer will be clean is to never turn it on in the first place.



Not all commercial software firewalls are resource-consuming.





I have a product suggestion here, if you are looking for a light application, I'd recommend Kerio 2.15:

http://www.321download.com/LastFreeware/page7.html





Good luck, let me know how it goes.

Answer 2

it really depends what you've got on the PC. Strictly speaking you don't need a software firewall at all, either your running a PC on a network, in which case you can use your router as a firewall, or your running a standalone PC, in which case you can switch off most of your networking components. You can leave every port open to the outside world, but if there are no processes listening on your PC ( i.e. something on your pc is set to respond to unrequested traffic from the internet) then no hacker or worm is going to get through. Switch off unnecessary services and You are practically safe already, windows firewall is simply extra and perfectly sufficient protection. Switching off these services will also free up resources. The only real need for a software firewall is on a standalone PC which is deliberately set up to respond to the internet in some form of server role. .To Jhonoford. YOU should not turn off your routers firewall the only firewall you need to turn off is the windows one.

Answer 3

NAT (Network Address Translation) only blocks some attacks. A software firewall blocks much more.



I use an old version (5.5) of Zone Alarm which works well for me. It only uses minimal resources.