What Does a Computer Firewall Do?

This articles purpose is to give non technical users a brief overview of the benefits and limitations of firewalls. It covers networks related to businesses and home users. It is presented in very simple terms so the average user will have no problem comprehending it. After reading this the average user will understand most basic functions and forms of a firewall.

Computer firewalls come in both hardware and software forms. They are mainly meant to protect a small network from outside access like the internet. While both forms do the same thing technically, they both have their pros and cons. Hardware firewalls are physical units that you plug your network into, and software firewalls are programs that run on your PC.

Most users will recognize the physical firewall as the router that their connections run through. Internet service providers will often offer these as bundles, or at discount rates to help you set up your network. Software firewalls are often bundled with other protection programs for the best protection. They can also be built into your operating system.

Not all firewalls are created equal however. Some are very secure due to their advanced features, while others are basic versions with low level security. Hardware firewalls such as routers that are bought or provided to you, will have a default setting to block all incoming but allow all outgoing traffic. This is still a security risk and needs to be addressed.

This is not as secure as it might seem, as if some malware gets in to a computer, via email for example, there is nothing to stop the malware from communicating out of the network and uploading anything it is programmed to do so, like passwords and credit card details, or it can download anything on to your computer completely undetected, more malware for example. This is all possible because the firewall is not configured to block any outbound communication. It is important to realise that a firewall is not the security panacea some believe it to be.

Hardware firewalls are also affectionately referred to as dumb firewalls in the industry. This is because the lack the intelligence or analytical capabilities to scan what traffic comes through them. Whatever you tell it to allow, it will allow, if there is malware in the mix it will get through. This type of firewall is very user input dependant.

Software firewalls installed on a computer are generally more intelligent, as they can detect what type of traffic is being passed and can alert the user to this activity. This is because they are normally part of an antivirus firewall software product and can determine that the code is harmful. This why people choose to buy antivirus firewall software as it gives you far more control over what enters your computer system.

Most firewalls bundled with your operating system work on the same method as the hardware firewall. Meaning they allow all outgoing but no incoming traffic. This still leaves you vulnerable and you should not rely on this for long term protection. It's usually advisable to get a software firewall just to be safe.

Understanding what a firewall does and does not do will help you assess your computer security needs and a firewall is only a part of a system required to protect your computer data from hackers and viruses.

About the Author

If you are looking for excellent antivirus firewall software at a great price visit the authors site about firewall software. Peter Allan has been consulting to small business for over 15 years and recommends the best software available.