# Windows XP firewall

**URL:** <https://boards.straightdope.com/t/windows-xp-firewall/91129>\
**Category:** Factual Questions\
**Created:** [November 2, 2001, 2:54pm UTC](https://boards.straightdope.com/t/windows-xp-firewall/91129 "2001-11-02T14:54:45Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Phouchg](https://avatars.discourse-cdn.com/v4/letter/p/41988e/32.png) [@Phouchg](https://boards.straightdope.com/u/Phouchg)\
**Post date:** [November 2, 2001, 2:54pm UTC](https://boards.straightdope.com/t/windows-xp-firewall/91129/1 "2001-11-02T14:54:45Z")

</div>

Is the built-in firewall with XP sufficient for my home cable modem - or should I stick with Zone Labs?

Phouchg  
Lovable Rogue

---

<div class="post-metadata">

**Author:** ![Waverly](https://avatars.discourse-cdn.com/v4/letter/w/57b2e6/32.png) [@Waverly](https://boards.straightdope.com/u/Waverly)\
**Post date:** [November 2, 2001, 3:05pm UTC](https://boards.straightdope.com/t/windows-xp-firewall/91129/2 "2001-11-02T15:05:52Z")

</div>

Just a hunch, FWIW, the XP firewall will likely not stop MS programs from phoning home. Directed com, some MS installers, etc. all are known to attempt access to the internet without the user initiating the connection. IF you object to this activity, or worry that this is a security weakness other programs may capitalize on, IMO keep Zone Alarm.

---

<div class="post-metadata">

**Author:** ![Ethilrist](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ethilrist/32/4604_2.png) [@Ethilrist](https://boards.straightdope.com/u/Ethilrist)\
**Post date:** [November 2, 2001, 3:10pm UTC](https://boards.straightdope.com/t/windows-xp-firewall/91129/3 "2001-11-02T15:10:39Z")

</div>

I think it’s pretty safe to assume that XP will let viruses into your system, seeing as how every Microsoft OS before this one has done that, including NT, which was BUILT for security.

---

<div class="post-metadata">

**Author:** ![bdgr](https://avatars.discourse-cdn.com/v4/letter/b/a87d85/32.png) [@bdgr](https://boards.straightdope.com/u/bdgr)\
**Post date:** [November 2, 2001, 3:29pm UTC](https://boards.straightdope.com/t/windows-xp-firewall/91129/4 "2001-11-02T15:29:14Z")

</div>

Run zone alarm. Deffinately. It caught IE trying to contact something today, when it wasnt even open.

---

<div class="post-metadata">

**Author:** ![micco](https://avatars.discourse-cdn.com/v4/letter/m/5f8ce5/32.png) [@micco](https://boards.straightdope.com/u/micco)\
**Post date:** [November 2, 2001, 4:13pm UTC](https://boards.straightdope.com/t/windows-xp-firewall/91129/5 "2001-11-02T16:13:37Z")

</div>

I don’t endorse XP, much less XP’s firewall, but this article implies that it does a pretty good job out of the box:

> **[Win-XP firewall defeats Gibson NanoProbes](https://www.theregister.com/2001/10/26/winxp_firewall_defeats_gibson_nanoprobes/)**
>
> How can the bad kiddies find you if Steve can't?

As others have said, some of the most egregious spyware is Microsoft’s own, and it’s unlikely the XP firewall will filter these unless you’re very creative in the rules set. If you’re concerned about outgoing as well as incoming packets, using Microsoft’s firewall to police Microsoft’s apps has a “who watches the watchers” problem.