Security Failures of the built-in Windows Firewall

A good firewall should monitor inbound AND outbound connections for malicious threats. I expect a firewall to stop malware before it connects to my system AND protect my personal information by stopping outbound connections from being established. Maybe I have unusually high expectations when it comes to my security online, while that may be true; Microsoft is light-years away from meeting my expectations.

The saying “you get what you pay for” seems to be true in the case of the free Windows Firewall. Microsoft’s Firewall is a part of the security features available within Windows Vista and Windows XP SP2. Millions of PC users rely on the Windows Firewall for protection against malicious viruses and hackers. While monitoring inbound connections for malicious attacks, the Microsoft Firewall may be reliable, but that’s where the reliability with this firewall ends.

Not all malware makes its way onto a system via internet connections. Malware can be installed on a computer system via DVD’s, CD’s, USB connections, software installations and other sources making it necessary for a reliable firewall that monitors outgoing connections at all times.

The Windows Firewall is set to a default setting to allow all outbound connections, pretty much letting cyber thieves broadcast out the user’s personal data or use the machine as a part of a larger botnet, if not just relay spam through the machine. Most home users are unaware that the Windows Firewall is allowing an open, outbound connection because the default settings recommend “allowing connections except when excepted”. As confusing as that statement is, this may seem ok until you realize in the default configuration, there are no outbound ‘block’ rules, only allow rules. In other words, even though the Windows Firewall outbound protection is on, it is not doing anything.

Relying on Windows Firewall is dangerous, but the regrettable truth is most home users will never realize what a complete failure the Windows Firewall is and how it is leaving them open to an attack.

For a firewall that will protect you from malware, monitor inbound AND outbound connections, try the Sunbelt Personal Firewall.