Firewall - Blocking outgoing connections?

[Giannis]

Hello, this is a mostly a question i have for firewalls. Let's say for example you use an internet security suite like EIS and you've set the outgoing connections to block. If a malware manages to get through all the guards including behavior blocker and for example that malware is a keylogger, by the time it tries to "communicate" it will be blocked because the outgoing connections are set to block right? If that's true, is this one of the reasons why it's good to have a firewall installed that monitors outgoing connections or use an internet security suite/having a separate firewall, regardless if you are a home user or not?

 

[hjlbx]

Hello, this is a mostly a question i have for firewalls. Let's say for example you use an internet security suite like EIS and you've set the outgoing connections to block. If a malware manages to get through all the guards including behavior blocker and for example that malware is a keylogger, by the time it tries to "communicate" it will be blocked because the outgoing connections are set to block right? If that's true, is this one of the reasons why it's good to have a firewall installed that monitors outgoing connections or use an internet security suite/having a separate firewall, regardless if you are a home user or not?

Yes. Whether new app connects are notified or blocked - outbound firewall monitoring is a great idea; Windows firewall is typically enough, if you have outbound connection notification (bare minimum add BiniSoft's Windows Firewall Control - or equivalent).

 

[jamescv7]

By its simplistic terms, many firewalls have different modes of action and one you've set is equivalent to 'Policy based mode' therefore it should block according to the rules and configuration.