Most of the computer users are familiar with the term Firewall. Firewalls are Hardware or Software programs that monitor incoming and outgoing connections analyzing the packet data for malicious behavior. Like the definition says, there are both Software and Hardware Firewall. In this modern age, we are literally at war with hackers and malware and virus developers, all the time and data security has become the number one concern. To protect our computers, we use security software like AntiVirus and Firewalls – and as we just mentioned, there are two kinds of firewalls – Hardware firewalls and Software firewalls.

In this article we’ll talk about difference between Software Firewall & Hardware Firewall.

Hardware Firewall

Hardware Firewalls are mostly seen in broadband modems, and is the first line of defense, using Packet Filtering. Before an Internet packet reaches your PC, the Hardware Firewall will monitor the packets and check where it comes from. It also checks if the IP address or header can be trusted. After these checks, the packet then reaches your PC. It blocks any links that contains malicious behavior based on the current Firewall setup in the device. Hardware Firewall usually do not need a lot of configuration. Most of the rules are built-in and predefined and based on these in-built rules, the Packet Filtering is done.

Todays technology has improved so much that it not just the traditional Packet Filtering which is carried out. The Hardware Firewall has built-in IPS / IPDS (Intrusion Prevention Systems), that earlier used to be a separate device. But now these are included, offering us greater protection.

When an IPDS detects a malicious activity it sends and signal and reset the connection and block the IP address. It uses signature-based, statistical anomaly-based, and stateful protocol analysis. You can read more about this . But the main drawback I find, is that it allows all the outgoing packets i.e. if by chance, a malware got into your system and started transmitting data, it would be allowed unless the user became aware of it, and decided to stop it. But in most cases, this does not happen.

Hardware Firewall are typically good for small or medium business owners, with 5 or more PC or a co-operate environment. The main reason is that it then becomes cost-effective, because if your to purchase Internet Security/Firewall software licenses for 10 to 50 copies, and that too on an annual subscription basis, it will cost a lot of money and deployment could also be an issue. The users will have better control over the environment. If the user is not tech savvy and if they choose to inadvertently allow a connection that has Malware behavior, it could ruin the entire network and put the company in risk with data security. A hardware firewall could thus be very useful in such cases.

Source: www.thewindowsclub.com