Use Outbound Firewall For Extra Security?

Category: Security

A curious and astute AskBob reader says: “I understand why I need a firewall to protect my computer from inbound threats. But a friend is telling me I need another type of firewall, which blocks outbound traffic as well. If I have good anti-virus software, do I really need this outbound firewall?” Good question, here’s my take on outbound firewalls...

What Kind of Firewall Do You Need?

Most people think of firewalls as barriers between their computers and bad things “out there” on the Internet. Inbound firewall protection blocks attempts by external entities (hackers, malware or denial or service bots) to connect to your computer. See my related article Do I Really Need a Firewall? for my advice on INBOUND firewall protection. (Yes, you do need it, but... you probably already have one.)

But remember, the Internet is a two-way highway. Outbound firewall protection is just the opposite of inbound. It blocks attempts by software that resides on your computer to send data over the Internet. So if your computer is infected with a keylogger or some other data-stealing malware, an outbound firewall should prevent that rogue from transmitting your passwords, banking information, shoe size, and other sensitive information to its evil masters. If another type of malware is using your computer to spew spam or participate in a botnet, an outbound firewall should prevent that as well, in theory.

In practice, though, outbound firewalls provide little useful protection, consume computer resources, may interfere with legitimate programs, and are generally more trouble than they are worth. They can also give you a false sense of security.

Outbound Firewall

By default, the firewall in Windows 7, 8, 10 and 11 provides only inbound protection. You can enable outbound protection as well, but then no program on your machine will be allowed to connect to the Internet! That means no browsing, no Windows Update, no email, no other updater programs, etc. You have to manually configure permission for every single program or process that you want to have access to the Internet, and update that configuration regularly. I don’t know about you, but that doesn’t sound like my idea of fun on a Thursday afternoon.

Other Reasons to Stick With Inbound Firewall Protection

Outbound firewalls tend to cry wolf; they spew too many false positives. That is, they warn you about programs that really are not a problem. After seeing many false positives and ignoring them, it’s all too easy to ignore a legitimate warning of malware. Imagine a security system in a retail store that flagged every customer leaving the store as a potential shoplifter.

In the introduction to this article, I described a reader as "curious." I believe curiousity is essential to success in many areas of life. One friend described curiousity as the precursor to genius. An article in the Harvard Business Review titled Curiosity Is as Important as Intelligence quotes Albert Einstein as saying "I have no special talents. I am only passionately curious." So be curious. Read a lot. Ask questions. Look for answers. Take things apart and find out how they work. Or just try new things. You might discover you're a genius.

There are legitimate reasons why some software on your computer may need to make an outbound connection. Some programs poll a remote server to see if there are any fixes or updates available, and install them automatically. Others send anonymous statistical data, or use collaborative feedback mechanisms. A weather or stock market widget on your desktop will need to poll for the latest data periodically. Multi-player online games send and receive reams of data. And then there are all the cloud-based apps that let you store, edit, and share files online.

It can be very hard for the average user to figure out whether a given program should be allowed to access the Internet. Most outbound firewalls give only cryptic descriptions of what is trying to access the Net, so only the most technically savvy users can decide what to do about it. The chances are pretty good that you’ll block a program you do need, and later wonder why something isn’t working.

You've heard the old saying about closing the barn door after the horses got out. Outbound firewalls don’t do anything to prevent your computer from becoming infected, which is the most effective line of defense. If an outbound firewall warns you that malware is trying to access the Net, it’s already too late; your inbound defenses have been compromised somehow. Better to focus on keeping your horses in the barn.

See my article PC Matic 4.0 – My Review if you need to beef up your malware protection. PC Matic has been my antivirus solution since 2018, and I happily recommend it. The whitelisting technology it uses is unique and works really well!

A router configured to use NAT (Network Address Translation) is my preferred alternative to software firewalls, inbound or outbound. Such a router effectively hides your computer from everyone “out there” so malware can’t even find it. It protects an entire network from a single point, instead of having to install firewall software on every device on the network. The router also does the heavy lifting, freeing resources on your local machine. The good news is that you probably already have a NAT router. See Do I Really Need a Firewall? for more information about routers and inbound firewall security.

Expert users may have to resort to outbound firewalls occasionally. If you know every legitimate program that should be allowed access to the Net, an outbound firewall may alert you to hidden malware. Large enterprises may employ outbound firewalls to make sure sensitive or confidential data isn’t leaking out. But some malware is clever enough to disable your anti-virus or firewall protection, or fool the outbound firewall into letting it slip past.

The bottom line: Outbound firewall protection is of very marginal benefit and can be an enormous irritation. See my advice and links above concerning INBOUND firewalls and malware protection, and you’ll be better off.

Your thoughts on this topic are welcome! Post your comment or question below…

 
Ask Your Computer or Internet Question

 
  (Enter your question in the box above.)

It's Guaranteed to Make You Smarter...

AskBob Updates: Boost your Internet IQ & solve computer problems.
Get your FREE Subscription!


Email:

Check out other articles in this category:



Link to this article from your site or blog. Just copy and paste from this box:

This article was posted by on 13 Jun 2023


For Fun: Buy Bob a Snickers.

Prev Article:
Time For a PC Tuneup? Try These Free Tools

The Top Twenty
Next Article:
Was Your Email Inbox Hijacked?

Most recent comments on "Use Outbound Firewall For Extra Security?"

Posted by:

hifi5000
13 Jun 2023

Until now, I never heard of a outbound firewall.After reading about their disadvantages,it will be good to focus on the inbound part of a firewall to keep trouble from starting in the first place.


Posted by:

Robert H
13 Jun 2023

Using HR Block software, Windows Defender blocks software updates, despite allowing their website in outbound rules (?). Temporarily suspending WD allows the updates. Makes no sense...


Posted by:

Brian B
13 Jun 2023

I have used PC Matic now for years and must admit, it does a fantastic job. One question that I can't find an answer to though is, does SuperShield's white listing prevent malware from executing and calling home?
In other words, does it act as a de facto outbound firewall?


Posted by:

Stephen
14 Jun 2023

There are many effective firewall solutions. I tried a few of them, but Comodo Firewall is the one that impresses me most. I use Cruelsister's settings (can be found on her YouTube channel) which include containment of unknown and/or malicious programs.


Posted by:

Lucy
14 Jun 2023

Bob ... You mention PC Matic, Have you any advice regarding their new VPN?


Post your Comments, Questions or Suggestions

*     *     (* = Required field)

    (Your email address will not be published)
(you may use HTML tags for style)

YES... spelling, punctuation, grammar and proper use of UPPER/lower case are important! Comments of a political nature are discouraged. Please limit your remarks to 3-4 paragraphs. If you want to see your comment posted, pay attention to these items.

All comments are reviewed, and may be edited or removed at the discretion of the moderator.

NOTE: Please, post comments on this article ONLY.
If you want to ask a question click here.


Free Tech Support -- Ask Bob Rankin
Subscribe to AskBobRankin Updates: Free Newsletter

Copyright © 2005 - Bob Rankin - All Rights Reserved
Privacy Policy     RSS/XML


Article information: AskBobRankin -- Use Outbound Firewall For Extra Security? (Posted: 13 Jun 2023)
Source: https://askbobrankin.com/use_outbound_firewall_for_extra_security.html
Copyright © 2005 - Bob Rankin - All Rights Reserved