The Firewall is one of the most important security programs, and we have seen that someone is always trying to sell something new and revolutionary. However, Windows has its own firewall from Windows XP SP2 onwards, and it is more than enough.
You also do not need a full security suite (see Internet Security Suite with a different brand name at a time). All you really need is an antivirus.
Why you need the Firewall
The main function of a firewall is to block unwanted incoming connections. Firewalls can block different types of connections in smart ways, for example, they can allow access to network file shares and other services, when your laptop is connected to your home network, but not when it's connected to a public Wi-Fi network.
A firewall blocks connections to potentially vulnerable services and controls access to network services - especially shared files, and all file shares in general.
With the release of Windows XP SP2, Windows Firewall was upgraded and turned on by default. Before that, Windows XP systems that were directly connected to the Internet were infected after an average of four minutes. Worms like the Blaster worm broke because there was no firewall.
Why Windows Firewall is good enough
Windows Firewall does exactly the same work blocking inbound links as a third-party firewall. Third-party firewalls, such as what is included in Norton, will often show you windows that will let you know about its exploits. Any blocked link will appear and sometimes you will be asked for your advice on what to do. The phenomenon is quite embarrassing, especially if you do not disable notifications. Windows Firewall is doing its great work in the background.
It is enabled by default and should still be turned on if you have not turned it off manually or if you have not installed a third-party firewall. You can find its interface with Windows Firewall from the Control Panel.
When a program from your computer needs to have inbound links, you will need to create a rule in the firewall or a dialog will appear and ask for your permission.
When do you need a third party Firewall?
By default, Windows Firewall only does what's really important: blocks incoming connections. It has some more advanced features, but it's in a hidden, and harder to use interface.
For example, most third-party firewalls allow you to easily control which applications on your computer can connect to the Internet. When an application requests an outgoing connection, a window will appear. This allows you to control which applications on your computer can access the Internet, and lock those that do not need to communicate over the Internet.
Experienced users love this one feature, but for the average user it is a problem. With every app detection it can block background processes-updater, leaving its software vulnerable if it won't be updated. It's also pretty annoying to have to confirm dialogs every time a new app wants to connect.
However, if you need to manage outbound connections, you need a third-party firewall. They offer a user interface where you can easily view statistics, firewall logs, and other information.
Advanced features of Windows Firewall
Windows Firewall actually has more features than you would expect, although its interface is not so user-friendly.
However, Windows has an advanced firewall configuration interface, where you can create advanced firewall rules. You can create rules that block certain programs from connecting to the Internet, or you can allow a program to communicate with specific addresses.
Windows Firewall is stable and fairly reliable. We can not say the same about Microsoft Security Essentials / Windows Defender, but good to say.
