If we only realised how dangerous the Internet was, we would never go on there.
There are many malicious sites, and malicious software developed to take advantage of your computers, and exploit the information or the resources to further cause malicious damage.
Firewall is a word that covers too much and has no clear definition in today's Internet. When they were first released they simply blocked ports both inwards and outwards. This is no longer enough to protect you completely.
Note: Some would say that a bad firewall is worse than not having a firewall at all, due to false beliefs in the level of protection provided.
Firewalls improved to allow more control on inbound and outbound data.
But this use to be enough to protect you, that is no longer the case, new sites with new ways of exploiting you are available, new hacking tools to exploit vulnerabilities in software and hardware.
Note: The internet is a great tool for information, but in the wrong hands it is dangerous. There are websites that provide the latest information on known exploits, one such is metaexploit. This is useful for administrators, as it helps them stay on to of issues if they are proactive, but it also means that this information can be used for malicious purposes, and used to get into your systems.
Asking any IT consultant they will recommend a firewall and antivirus.
But that again is no longer enough.
To give yourself the best protection, I would recommend a UTM based firewall. UTM stands for Unified Threat Management. These firewalls no longer just block ports, but look deep into the packets of information going through them.
What can they do:
- Check for SPAM emails
- Check for Viruses
- Check for Intrusion Prevention System
- Web Site Filtering
- Application level monitoring
These are only some of the features available just at your network's edge where your network connects with the internet and everyone else in the world.
Your firewall is your connection to the internet, it has to be able to protect you from as much harm as possible from both the outside world and what your users want to do in the rest of the internet. It is only one part of a good security strategy.
If you are unsure of any information, please consult your local IT Consultant or better yet your nearest Microsoft Small Business Specialist.
Kind regards.
David