Broadband and security

[anonymous-user]

I'm about to get Broadband (yipee! 21st Century here I come )

I have Zonealarm on my computer and Norton Anti Virus. Should I be seeking some extra protection for Broadband?

Thanks

Paul

[tvrforever]

yes... but how are you connecting? via a router or via a broadband modem? if you're using the router then it's fairly simple to setup filters and access lists to aid security (indeed most home routers now include some firewall software).

but the good news is that with broadband at lest you can configure your personal firewall & AV software to auto-update on a daily basis...

[simpo two]

I don't know about other ISPs but Metronet have a firewall you can switch on their end. Plus there's also one in XP. There are also sites you can go to which will check your security by probing and seeing what's sticking out - can't remember them but hopefully someone else will.

[hornet]

http://security.symantec.com/ssc/home.asp?j=1&langid=in&venid=sym&plfid=23&pkj=CJWTBXUQIZQVMUYTACD

I run the various scans periodically, just to check my security tools are working. Other security tools include Sygate personal firewall, Ad-Aware 6.0, Spybot S&D, Hijack This and a registry cleaner to keep things unbloated. Also have Windows and my antivirus set to auto update.

Might be using a hammer to crack an egg, but prefer to be on the safe side.

[marlboro]

Buy a Broadband/ADSL router and disable all incomming IP ports. Also use AdAware and Norton AV. Should be safe enough.

[anonymous-user]

Thanks for the advice chaps. Spybot / Adaware already installed. Access is via a broadband modem and my ISP is BT. Only a week to wait now!

[tinman0]

i would bin the modem and get a router. they cost 40 quid or less.

you dont have to configure the router other than setting up NAT.

once NAT is running security is implied. You dont actually have to filter ports.

there is an option nowadays to set a DMZ. do not config it otherwise your security will be shot to bits in one go. you'll rarely need such an option anyway.

Tin

[Marshy]

tinman0 said:

there is an option nowadays to set a DMZ. do not config it otherwise your security will be shot to bits in one go. you'll rarely need such an option anyway.

Cough. What?

PS. Why the wisdom here that ZoneAlarm isn't good enough and that chap needs to fork out for a router instead? Looking at chap's list of countermeasures, I'd say he's actually rather well set up.

[joospeed]

yup, why is broadband any worse than dial up for security? .. and why isn't zonealarm good enough? .. I have ZA and AVG cos they're freeware but is it not good enough.?

i use a broadband modem too cos I don't even know what a router is!!

maybe time to do some research? is it really that critical? IT guys and gals : over to you

[FunkyNige]

Hardware firewalls (the ones in routers) are generally considered safer than software ones (zonealrem, etc.).
You don't need to bin your modem if you do get a router, you can buy a non-modem router for about £30 which you can plug your existing modem into.
HTH

[tinman0]

the reaon your hardware solution is better for security than your software solution is actually very simple.

if the pc is compromised, your security stays intact, eg a virus cant suddenly turn whatever is acting as your firewall off.

tin

[tinman0]

Marshy said:

[quote=tinman0]there is an option nowadays to set a DMZ. do not config it otherwise your security will be shot to bits in one go. you'll rarely need such an option anyway. Cough. What?

if you dont understand it, dont worry, just dont set it.

tin

[tinman0]

joospeed said:

yup, why is broadband any worse than dial up for security? .. and why isn't zonealarm good enough? .. I have ZA and AVG cos they're freeware but is it not good enough.? i use a broadband modem too cos I don't even know what a router is!! maybe time to do some research? is it really that critical? IT guys and gals : over to you

broadband is worse becuase your connection will stay up generally much longer. so there is a greater chance you will be "scanned".

a scanning of all open ports on your connection will probably take place every 20-90 miutes. If there is a single weakness, you're machine will be autohacked.

tin

[GlenMH]

tinman0 said:

[quote=joospeed]yup, why is broadband any worse than dial up for security? .. and why isn't zonealarm good enough? .. I have ZA and AVG cos they're freeware but is it not good enough.? quote] broadband is worse becuase your connection will stay up generally much longer. so there is a greater chance you will be "scanned". a scanning of all open ports on your connection will probably take place every 20-90 miutes. If there is a single weakness, you're machine will be autohacked. tin

I have both: a NAT firewall router that sits on the back of the modem and a software firewall. Sometimes I do get port scans that get past the router so it is best to have both. You cannot take on-line security too seriously.

Tin is very right - the newer viruses have the ability to disable popular AV and firewall packages....

Glen

[KITT]

If you want to checkout your security then use "Shields up":

www.grc.com/

It's a free utility that will test your firewall and see if there are any holes.

edited for spelling!

>> Edited by KITT on Wednesday 14th April 14:44