Firewall question

[scj6771]

I have a total of 5 desktops connected through a Linksys BEFSR41 DSL Router, my question is I feel even though I have a hardware firewall, I do not feel that I am as secure as I think, should I look into a software option as well? also I am running an AD environment, I have a DNS server as well, should I setup the firewall on that server, or would I have to set it up on each machine?

[JackMDS]

May be this can Help.

Link to: Basic Protection for Broadband Internet Installation. (http://www.ezlan.net/firewall.html)

Link to: What is the Best Firewall? (http://www.ezlan.net/firewall_best.html)

.

[YeOldeStonecat]

Originally posted by scj6771
I feel even though I have a hardware firewall, I do not feel that I am as secure as I think,

I run with just NAT...I don't like software firewalls. But...software firewalls can be better for certain users (who aren't careful). Myself...I feel NAT is superior for performance, better at hiding your network from the outside, and I'm prudent with my computers, what I download, I practice regular windows updates, keep Symantec Corp Edition antivirus fully updated and running across my network, and periodically check with Spybot Search and Destroy.

NAT blocks the out from coming in. But doensn't block what's in from going out. So...if you do stuff that you worry you might have trojans, etc, on your computers (or have users that plain just don't care what they do/and/or download on their computers...then perhaps a software firewall is also needed.

[JWynn]

I have a hardware Firewall/Router to stop people from getting in.

Then to stop data from getting out I use Zone Alarm (http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=zadb_zadown) (Free and is very highly rated from many, many websites and users) which notifies you anytime a program tries to access the internet. It also stops people from getting in so for incoming in you get two layers of protection.

I wouldnt say that you need a second software firewall running on each computer, but if it will help you sleep better and you feel its worth the time then go ahead.