There are affiliate links on this page.
Read our disclosure policy to learn more.

Comprehensive List of Firewall Tools

Firewalls Tutorial

When your computer, phone, tablet or other device is accessible through your router and an internet connection, a cell netowrk or Wi-Fi network outside your home , it is susceptible to attack. However, you can restrict outside access to your computer, and the information on it, with a firewall.

How do Firewalls Work?

Firewalls are named that because they act like firewalls in buildings; acting as a hard barrier to prevent threats. They provide protection against outside attackers by filtering incoming traffic to protect your computer or network from malicious or unnecessary network traffic. Firewalls can also prevent malicious software (malware) from accessing a computer or network via the internet. Firewalls can be configured to block data from certain locations (like computer network addresses coming from China or Russia), applications, or ports while allowing relevant and necessary data through. (See Denial-of-Service Attacks and Understanding Hidden Threats: Rootkits and Botnets for more information.)

Types of Firewalls

Firewalls are either hardware and software. While both have advantages and disadvantages, the decision to use a firewall is more important than deciding which type you use. In general hardware firewalls are more secure and offer better protection.

  • Hardware Firewalls - Typically called network firewalls, these physical devices are positioned between your computer and the internet (or other network connection). Most consumer routers, like those from Netgear, Cisco, Dlink, etc. include a built-in hardware firewall.  You just have to go into settings and turn it on. Hardware-based firewalls are particularly useful for protecting multiple computers and controlling the network activity that attempts to pass through them. The advantage of hardware-based firewalls is that they provide an additional line of defense against attacks reaching desktop computing systems. The disadvantage is that they are separate devices that require trained professionals to support their configuration and maintenance.
  • Software Firewalls - Most computer operating systems (OS's) include a built-in firewall feature that you should enable for added protection, even if you have an external firewall. Firewall software is also available separately from your local computer store, software vendor, or ISP. If you download firewall software from the internet, make sure it is from a reputable source (i.e., an established software vendor or service provider) and offered via a secure site. (See Understanding Web Site Certificates for more information.) The advantage of software firewalls is their ability to control the specific network behavior of individual applications on a system. A significant disadvantage of a software firewall is that it is typically located on the same system that is being protected. Being located on the same system can hinder the firewall's ability to detect and stop malicious activity. Another possible disadvantage of software firewalls is that, if you have a firewall for each computer on a network, you will need to update and manage each computer's firewall individually.

How do you know what configuration settings to use?

Most commercially available firewall products, both hardware and software based, come preconfigured and ready to use. Since each firewall is different, you will need to read and understand the documentation that comes with it to determine whether the default firewall settings are sufficient for your needs. This is particularly concerning because the "default" configuration is typically less restrictive, which could make your firewall more susceptible to compromise. Alerts about current malicious activity (e.g., NCCIC's Alerts) sometimes include information about restrictions you can implement through your firewall.

 

How do hackers get past a firewall?

The simple asnwer is you or others inside your network, like other family members or employees.  Firewalls primarily help protect against malicious traffic coming from the outside, but they cannot protect against malicious programs (i.e., malware) if you choose to install them or click on links to them in emails or on the web.

 However, using a firewall in conjunction with other protective measures (e.g., anti-virus software and safe computing practices) will strengthen your resistance to attacks. (See How to Protect Yourself and Recommended Anti-Virus Software for more information.)

 

Sodtware Firewall Tools