untangling_the_web

OOClO: 4046925
UNCLASSIFIEDffFOR OFFIGIAL I:ISE ONLY
Install Software and Hardware Firewalls
Whether you are using an always-on connection such as cable or DSL, or you are
accessing the Internet via a dial-up connection, you need to install at least a
software firewall and, I believe, a hardware firewall as well. Firewalls, while not
foolproof, are the home user's best protection against Trojan horses and spyware.
Both types of malware are a huge threat to the Internet community because they are
insidious, hard to detect, and harder still to remove. The best advice about Trojan
horses and spyware is don't get them in the first place, and firewalls remain the best
defense against these types of malicious software.
Software firewalls 204 can be purchased for a relatively low price or, even better,
some of the best are free. Check Firewallguide's Personal Firewall Reviews for
some options.
However, while all Internet users need a software firewall. anyone with cable, DSL,
or satellite Internet access needs a hardware firewall, too. The bad news is that
"true" hardware firewalls are still fairly expensive and hard to configure. The good
news is that there is a very inexpensive alternative for the home user that offers
similar basic protection: a cable/DSL router. As with a hardware firewall, routers use
Network Address Translation or NAT to hide your computer's Internet address from
the bad guys. The firewall-and not your computer-becomes your connection to
the Internet, making it harder for malicious hackers to see your computer, much less
scan or attack it. In addition to NAT, firewalls (and good home routers) also use
something called Stateful Packet Inspection (SPI) to let through only those Internet
connections you request and block connections that are trying to break into your
computer.
Make sure the router you purchase offers SPI and good advanced control settings.
And, please, change your router password as soon as you install it! Malicious
hackers know all the default logins and passwords for every router ever made. For
example, check this site Oust one of many):
Default Password List
http://phenoeIiLdarklab.orq/cgi-bin/display.pl
It is important to understand that while a good home router will help protect your
computer from attacks, it is not impervious. Nothing really is, but for a home user,
you are going to be much more secure with software and hardware firewalls than the
vast majority of users who don't do anything to protect themselves. However, in
order to get the most good out of these products, you must configure them properly.
204 The firewall that is part of Windows XP (including the improved firewall in Service Pack 2) does
not provide "extrusion protection ," i.e., it only detects incoming data, not data that might flow from
your computer. Do not rely solely on the XP firewall.
UNCLASSIFIEDliFOR OFFICIAL I:ISE OULY 581