Activating the Windows Firewall

NOTE

The Windows Firewall was originally called the Internet Connection Firewall. It got a name change (and some beefing up) with Service Pack 2.

When you connect to the Internet via a broadband connection, your connection is always on. Unlike a dial-up connection, where you have to dial up every time you want to go online, a broadband connection keeps you constantly connected to the Internet. No dialing, no waiting, just an always-on connection.

The downside to an always-on connection is that it's much easier for hackers and crackers to break into your system from the Internet. In fact, if you have multiple computers sharing a connection, a dedicated cracker can attack your entire network and access data on all your computers.

You can protect against this type of Internet-based attack by installing a firewall between your gateway computer and the Internet. A firewall is a type of software program that acts as a kind of gatekeeper to keep undesirable users out. It works by checking all communications that travel between your computer/network and the Internet. It's selective about what information is passed through, and it also works to keep the addresses of your network's client computers hidden from other users on the Internet. In effect, your computers are protected because they can't be seen from the other side of the firewall.

Microsoft has recognized the issue of Internet-based attacks (and acknowledged the growth of broadband Internet connections) and provided a fairly good solution, in the form of its own built-in firewall. The Windows Firewall is a basic firewall that should do an adequate job of protecting the average home or small business network from outside attack.

The Window Firewall is automatically activated when you set up a shared Internet connection via the Network Setup Wizard. You can also activate (or deactivate) the firewall manually, by following these steps:

1.	Click the Start button and select Connect To, Show All Connections. (Or open the Control Panel and click the Network Connections icon.)
2.	When the Network Connections window appears, click Change Windows Firewall settings. TIP Windows Firewall isn't the only and it's certainly not the best firewall out there. There are lots of excellent third-party firewall programs available, including BlackICE PC Protection (blackice.iss.net), McAfee Firewall (www.mcafee.com), Sygate Personal Firewall (www.sygate.com), Norton Personal Firewall (security.symantec.com), and ZoneAlarm (www.zonelabs.com). If you install one of these programs, make sure to disable the Windows Firewall; running two firewall programs at the same time is apt to cause all manner of operational problems.
3.	When the Windows Firewall dialog box appears, as shown in Figure 11.2, click the General tab. Figure 11.2. Activating and configuring the Windows Firewall.
4.	To turn on the firewall, check the On option. To turn it off, check the Off option.
5.	Click OK to activate the firewall.

After you have the Windows Firewall activated, there are a number of advanced settings you can configure. Most users shouldn't have to bother with these settings. But if you're running your own Web site or just like to fiddle with power user settings, you might want to take a look at these settings.

You access the firewall settings from the Advanced tab of the Windows Firewall dialog box. Here's the thing, though you shouldn't mess with these settings if you're not familiar with them. (And you're probably not.) If you are familiar with them, you don't need me to go through all the details. Consult your Windows XP manual or the Microsoft Knowledge Base if you need more information.