Hardware vs. Software Firewalls

How to Choose What's Best For You
Even a novice baseball fan knows that you don't pitch a hardball in a softball game. Unfortunately, the rules of network and personal computer security aren't quite so well known.

Take, for instance, hardware and software firewalls. When properly configured, both security solutions shield users from hackers, crackers, cyber-prowlers, disgruntled employees, and other would-be attackers.

Despite their similarities, hardware and software firewalls have many differences. Choose the wrong one and you could wind up spending far more money than necessary.

Which type of firewall is right for you? You should know by the time you finish reading this brief primer.

Hardware Firewalls
For the sake of simplicity, think of hardware firewalls as specialized network boxes that contain customized hardware and software. When properly configured, hardware firewalls provide a protective barrier that hides an organization's internal PCs from the outside world. They can also shield one company department (i.e. finance) from another (i.e. human resources).

In many cases, hardware firewalls are great solutions for organizations that want a single security umbrella that protects multiple systems. For this very reason, most FORTUNE 500 networks have hardware firewalls in place.

So what's the downside? Since they are specialized devices, hardware firewalls tend to be expensive, complicated, difficult to upgrade, and tricky to configure. In other words, they are best reserved for IT managers who are specially trained to install, configure, and monitor such devices.

Low-end hardware firewalls, now found in network switches and routers for the home, also have their limitations. If you take a personal laptop on the road, for instance, your system is no longer protected by the home-based firewall.

Software Firewalls
In contrast to their hardware cousins, software firewalls are more ideal for individual users or small businesses that have dial-up or broadband Internet connections. Instead of using a custom (and often expensive) piece of hardware, a software firewall installs on an individual's PC, notebook, or workgroup server.

Even if a small business has hardware firewalls in place, it's wise for employees to use software firewalls on their own systems. The main reason: software firewalls are especially convenient for mobile workers who need digital security when working outside of your small business network. Also, software firewalls are more easily upgraded via the Internet than hardware firewalls.

“Free” May Cost You
Many modern operating systems, such as Windows^® XP, come with basic software firewalls. These “free” solutions only offer the bare minimum protection and are not to be confused with comprehensive software firewalls with multiple, sophisticated security features. As an example, a barebones firewall doesn't stop the outward data transmissions of personal information from a hard drive.

For a nominal investment, you can have one the industry's most robust software solutions, McAfee Total Protection for Small Business. This software package comes with an intuitive setup assistant; summary pages that identify network traffic; enhanced application handling that identifies trusted Websites,,robust intrusion detection, and even intrusion tracing that allows users to determine who's trying to attack their systems. These kind of advanced features aren't found in “free” alternatives.

Think of the firewall in McAfee security as a tireless traffic cop who stands between your system and the Internet. McAfee's firewall protection goes far beyond basic security. It allows you to analyze who is knocking on your computer's door, when and how the knock occurred, and where it came from. Most importantly, only trusted network traffic is allowed to enter and exit your system.

McAfee solutions are always active and always up to date. Through the McAfee Threat Center, you receive the latest information about security threats and updates.

Safety Measures
Firewalls are vital for defending against attacks, but common sense plays a major role in winning the battle with cyber criminals. For starters, it is wise to turn off Windows' file-sharing and printer-sharing features if you don't need them. If you activate such features, don't share files or printers with anyone outside of your network. And always, before you open unsolicited files (for example, an email with a .exe attachment), contact the sender via phone to confirm the attachment's contents.