Does Security Software Protect Your Router?

Category: Security

As home network owners become more aware of security threats that target routers they are asking, “Does my security suite defend my router along with the other devices on my network?” Let’s look at some of the most popular security suites and see exactly how they protect routers, if they do so at all. Read on...

Which Security Suites Protect Routers?

As usual, we'll start with some terms and definitions. A firewall protects your computer and other connected devices from both inbound and outbound attacks. Your router acts as a firewall, protecting you from attacks from the outside (the Internet). We call this a "hardware firewall." If everything is working as it should, your router's hardware firewall effectively makes all your computers and other connected devices invisible to the outside world.

A software firewall resides on and protects a specific computer from attacks originating from the inside -- such as malware on your computer, or other devices on your home network. We'll focus first on software firewalls, and then discuss some alternatives to your router's hardware firewall.

Let's start with the built-in security tools that Windows provides. In Windows 10, Microsoft confuses users by lumping all of its security features under the label “Windows Defender Security Center.” Windows Defender does not defend routers; it is merely a signature-based antivirus detect-and-kill program.

Protect Your Router and Home Network

However, Windows Firewall prevents outbound connections to the router from programs that are not authorized to do so. Windows Firewall settings are found in the Windows Defender Security Center. On a Windows 7 computer, look for "System and Security" in the Control Panel, and you'll see the Firewall settings there.

The Windows firewall can be turned on or off from its Settings panel. It should always be ON, unless you have installed another anti-malware tool that provides firewall protection.

Avast Free Antivirus does not include firewall protection. But Avast Premium and Avast Internet Security do. The firewall is enabled by default so there is nothing you need to do if you have either of these products. Your router and all other devices on your home network are protected against unauthorized connections.

AVG Antivirus, which is owned by Avast, does not have router protection in the free version. Firewall protection is available from AVG only in the AVG Internet Security suite. ($69.99/year).

Avira Free Antivirus includes firewall protection. BitDefender Total Security 2018 includes a firewall; after a 30-day free trial, one year of protection costs $44.99. MalwareBytes AntiMalware Premium has a firewall; after 14 days, it costs $39.99/year.

Insider Attack Protection

In my article HOWTO: Protect Your Router Now I gave some advice on how to log in to your router and tighten up several security settings, including disabling remote access to the router. If you missed that article, you should check it out now.

A firewall does not protect your router against attacks launched from devices inside the network. One of the most common attacks employed by hackers is called “cross-site request forgery” (CSRF), and a firewall will not stop it. Here is how a CSRF attack works: Your browser fetches a page from a web site and displays the things the page’s HTML describes, because that’s what browsers do. But embedded in that page is some Javascript code that attempts to access your router’s administrator console; that Javascript does not display anything onscreen so you have no clue what it’s doing.

Because this Javascript is inside your network, running in a browser on one of your devices, a firewall does nothing to block the malicious Javascript’s connection to the router’s administrative console. The Javascript then tries one or more default username/password combinations in hope of gaining access to the router’s settings.

If it is successful, the malicious Javascript goes on to change your router’s settings in ways that make it easy to compromise other devices on the network. Usually, it will turn off your firewall, allowing outside connections to be made to your router and other devices. It’s as if a small burglar slipped into your home inside an Amazon delivery box and opened the front door to let the whole gang of thieves ransack your home.

Thwarting a CSRF attack is one reason to configure your router so that its administrative console can be accessed only via a hardwired Ethernet connection. Javascript cannot fake a physical cable.

Avast Home Network Security has protected routers against CSRF attacks since June, 2016. The Home Network Security features are implemented through Avast’s WebShield module which is enabled in all versions of Avast security software, including Avast Free Antivirus.

Some Hardware Firewall Options

Avira SafeThings is a security program that is installed on a router, either at the factory or by the consumer. SafeThings discovers all devices on a network – including the router that manages it – and learns the normal behavioral patterns of each device. SafeThings blocks unusual behavior that may indicate a device has been compromised. It’s an interesting approach to Internet of Things security.

The second-generation Bitdefender Box is a router designed to be secure. Or it’s a security appliance that can function as a router if need be. The Box can plug into an Ethernet port on an existing router to scan all inbound/outbound traffic, and protect network devices (including the router) with Bitdefender’s multilayer security. If you own a high-performance router, this is the way to go. If you use a gateway device provided by your ISP, you can configure it to act as a modem only, and use the Box in “router mode.”

It’s important to guard your router against attacks, now more than ever. As the Internet of Things grows, the value of home networks to bad guys will also grow. Even if you don’t have any smart home appliances, your home network will still be targeted more and more by sophisticated malware seeking such things. A firewall that looks for attackers only “out there” is not enough; you also need security software that looks for attacks on your router that originate from other machines on your home network.

Your thoughts on this topic are welcome. Post your comment or question below...

Ask Your Computer or Internet Question

  (Enter your question in the box above.)

It's Guaranteed to Make You Smarter...

AskBob Updates: Boost your Internet IQ & solve computer problems.
Get your FREE Subscription!


Check out other articles in this category:

Link to this article from your site or blog. Just copy and paste from this box:

This article was posted by on 9 Jul 2018

For Fun: Buy Bob a Snickers.

Prev Article:

The Top Twenty
Next Article:
[FREE] Websites Without Hosting

Most recent comments on "Does Security Software Protect Your Router?"

Posted by:

09 Jul 2018

Most routers have a login = admin and a password = password. Simply change the password to something more difficult such as Fb6rTYQskl and you'll be OK. You'll have to know your routers IP address. Go to

to find out how to find it.

Be sure to record the new password for future reference after you make it up.

Posted by:

Richard hanley
09 Jul 2018

Bob: What about Sophos Protection

Posted by:

09 Jul 2018

I just have my ISP-provided router & a paid antivirus suite that records when programs are allowed through its firewall. I have my own router admin & WIFI passwords.

We have no IOT devices on our home network & use WIFI only to update our mobile devices.

Recently, a Microsoft Home/Office program was allowed access to my router’s IP address. Should I be worried? What should I do?

Posted by:

Wayne Wasserman
09 Jul 2018

Is there a site that will tell me if my Panda Pro and my Malwarebytes Premium protect me from CSRF attacks?

Posted by:

09 Jul 2018

Great article. It took me awhile to understand just how important the Firewall was for my router.

Now, I have had issues in the past with software Firewalls not playing nicely with my hardware Firewall, which is my Router's Firewall. I have been dealing with hardware Firewalls for about 16 or 17 years now. I got my first hardware Router back in 2001, late in 2001. My daughter was the one who told me about the Firewall and how to look for help in setting it up. I did look for help and learned how to set up my Firewall and what it was all about.

Will admit, I was a bit confused at the very beginning but I did learn and believe it or not it was the Steve Gibson's website Shield's Up that taught a lot about routers/modems and Open Ports, which is what Firewalls are really all about. Firewalls "close" the ports, for your protection. Now, this is especially true of hardware Firewalls, but not necessarily software Firewalls.

A-V Security program Firewalls are software, not hardware. While Router/Modem Firewalls are hardware. The Firewall in Routers/Modems are part of the hardware within the Router/Modem and can have its firmware updated if the company decides to do so.

Yes, A-V Security programs can update their Firewalls, but again, they are software, not hardware and there are no firmware updates because they simply do not have any firmware to update, they are software, not hardware.

If, I have confused anyone, please understand it took me awhile to get the whole picture myself. When I finally got it, I understood. My understanding did come from building my own computers and building computers for family and friends. I learned the difference between hardware and software.

Oh, Bitdefender's Internet Security has a great deal for "sale" right now. It is only 39.99 for 1 year with 3 devices covered. That is a good deal, just saying.

Posted by:

09 Jul 2018

I forgot to mention that Bitdefender Internet Security has a Firewall with the program. Remember, it is a software Firewall, but it is a good one.

Posted by:

09 Jul 2018

So... what about Norton, McAfee, etc. - all the big commercial security packages?

Posted by:

John Lewis
10 Jul 2018

Why not just check to see if your router has a firewall? My D-Link 1360 has one listed under specifications.

Posted by:

11 Jul 2018

If you Java code runs in a browser on a computer that is hard wired Ethernet, would it not access the router VIA the LAN? Sure, software firewalls are a very good thing to protect the device they reside on from attacking other devices. Some HP printers have firewalls. It would seem devices that have no firewall may still be subject to attack via a compromised router as most outbound rules are off by default. "Thwarting a CSRF attack is one reason to configure your router so that its administrative console can be accessed only via a hardwired Ethernet connection. Javascript cannot fake a physical cable."

Posted by:

15 Jul 2018

I thought the computer revolution was supposed to increase the quality of human existence. Every time Bob has a new article, it's about another threat to our computers . . . and our lives . . . which, more and more, are dependent upon and/or controlled by these supposedly wonder machines. I may soon become a Luddite and go live with the Amish.

Post your Comments, Questions or Suggestions

*     *     (* = Required field)

    (Your email address will not be published)
(you may use HTML tags for style)

YES... spelling, punctuation, grammar and proper use of UPPER/lower case are important! Comments of a political nature are discouraged. Please limit your remarks to 3-4 paragraphs. If you want to see your comment posted, pay attention to these items.

All comments are reviewed, and may be edited or removed at the discretion of the moderator.

NOTE: Please, post comments on this article ONLY.
If you want to ask a question click here.

Free Tech Support -- Ask Bob Rankin
Subscribe to AskBobRankin Updates: Free Newsletter

Copyright © 2005 - Bob Rankin - All Rights Reserved
About Us     Privacy Policy     RSS/XML

Article information: AskBobRankin -- Does Security Software Protect Your Router? (Posted: 9 Jul 2018)
Copyright © 2005 - Bob Rankin - All Rights Reserved