So I have been reading articles on windows firewall and most them say that the firewall is as good as any other antivirus. I don't download games on my PC, I only use it for work and a bit of streaming. Wanted to know if the firewall is enough or should I buy an antivirus?
📎 AI Summary:
This thread discusses whether a Windows firewall alone is sufficient for security, with the original poster questioning if they need additional antivirus software since they mainly use their PC for work and streaming. The responder explains that layered security—combining both a firewall and antivirus (endpoint protection)—is recommended, emphasizing their different functions in filtering network traffic and detecting malicious code. The discussion concludes with the original poster appreciating the helpful clarification.
This thread discusses whether a Windows firewall alone is sufficient for security, with the original poster questioning if they need additional antivirus software since they mainly use their PC for work and streaming. The responder explains that layered security—combining both a firewall and antivirus (endpoint protection)—is recommended, emphasizing their different functions in filtering network traffic and detecting malicious code. The discussion concludes with the original poster appreciating the helpful clarification.
Solution
TLDR: Layered security is better than having a single control. You should have a firewall and antivirus (Endpoint Protection)
A firewall and antivirus (most security folks will refer to the more technically correct term endpoint protection) are very different types of security controls.
A firewall is meant to filter network traffic based on different characteristics. Most firewalls will block and/or allow traffic by ip adresses and ranges, ports as well as based on network connection states. There are other advanced features depending on the firewall.
Endpoint protection software looks at code on the system for malicious indicators in code either pre disk write or after, and some can look at the code in-memory (better protection).
Some EPPs will also be bundled with other tools including firewalls. These sometimes have added checks that prevent the firewall rules from being altered.
A firewall and antivirus (most security folks will refer to the more technically correct term endpoint protection) are very different types of security controls.
A firewall is meant to filter network traffic based on different characteristics. Most firewalls will block and/or allow traffic by ip adresses and ranges, ports as well as based on network connection states. There are other advanced features depending on the firewall.
Endpoint protection software looks at code on the system for malicious indicators in code either pre disk write or after, and some can look at the code in-memory (better protection).
Some EPPs will also be bundled with other tools including firewalls. These sometimes have added checks that prevent the firewall rules from being altered.