Router Firewall & Apple Firewall ~ Do I need both?

Question

Level 4

3,588 points

Router Firewall & Apple Firewall ~ Do I need both?

Hi.
Someone 'here' (somewhere on 'Discussions', can't remember where) mentioned that there is no need to have a router firewall & the Apple FW on together. Why is that? Does the router FW just make the Apple FW redundant or do they clash with each other? Is there any advantage to turning off the Apple FW given that the router firewall is on 24/7?

Sorry, lots of questions...

Thanks in advance.

Adrian

ibook G4: 768mb, iMac 17" G4:768mb (10.3.9), Mac OS X (10.4.4), Belkin Wireless F5D7632

Posted on Feb 15, 2006 4:55 AM

Reply

Answer 1

UptimeJeff

Level 4

3,479 points

Feb 15, 2006 6:38 AM in response to Adrian Clarke1

Nobody can tell you if you need both... it all depends on your needs, risk tolerance, value of data, what services you have enabled, and also the setup of your LAN.

You can run both a router/firewall and your computer's firewall- and it's not a bad idea to do this. There are no issues with them clashing.

Here's one reason you may also want to run the software firewall
- If a computer on your LAN is compromised, this comprimised system is behind your router/firewall and could carry out automated attacks on your lan or even be manually controlled by another person. The only thing standing between the compromised computer and your computer is the software firewall.

Jeff

Reply

Answer 2

Adrian Clarke1 Author

Level 4

3,588 points

Feb 15, 2006 7:02 AM in response to UptimeJeff

Thanks for that Jeff.
No sophisticated LAN here, just my iBook wifi to Belkin router and iMac wardwired to same, to DSL. No services enabled except file and printer sharing on the iMac. Nobody within poaching distance of our wifi so I doubt either machine could be compromised. I'm keeping both SW FWs on for now anyway...

Adrian

Reply

Answer 3

Feb 16, 2006 12:35 PM in response to Adrian Clarke1

If you have a laptop and you take the laptop to public WAPs, I highly recommend you leave the firewall enabled because more than likely, you'll forget to enable it at your local coffee shop!

Reply