Advice Request Security product which will show alerts when a program is accessing the internet

[jonjon]

Hi guys

First post so be gentle

i'm looking for advice/suggestions/guidance/recommendations on the best apps out there for giving me real time alerts for any program accessing or trying to access the internet. I'm running win10 pro 64

thanks

 

[JM Safe]

Comodo Firewall, actually it is more than a simple network monitor it can literally constitute your security setup if properly set, please look here for more info: Comodo

 

[Deleted member 178]

Any firewall.

 

[RoboMan]

Any firewall.

Yeah basically LOL, that's what I was about to comment.

Any firewall with notifications. You can literally install Windows Firewall Control (Malwarebytes, ex Binisoft) and this will alert about every program accessing the internet and let you decide wether allow or deny. It's free.

 

[JM Safe]

Any firewall.

Do you know Evorim Free Firewall?

 

[ChemicalB]

A good network monitor is Glasswire (free or paid version).

 

[Deleted member 178]

Do you know Evorim Free Firewall?

No, and I don't even want to, i'm fully satisfied with Windows Firewall.
I still use binisoft WFC for faster rulemaking.

 

[Moonhorse]

A good network monitor is Glasswire (free or paid version).

Hows Glasswire compared to comodo firewall? Any pros?

 

[JM Safe]

No, and I don't even want to, i'm fully satisfied with Windows Firewall.
I still use binisoft WFC for faster rulemaking.

Yeah, I tried WFC in a VM several months ago.

 

[Der.Reisende]

I'm very happy with Windows 10 Firewall Control by Sphinx Software (despite the name also compatible to Windows 8.1, Windows 8, Windows 7, Windows Server 2008 (R2,SP1), Windows Server 2012 (R2)). It uses the built-in Firewall of Windows and enhances it with outbound alerts.

Super light and non-intrusive. Super-easy to use.

Windows 10 Firewall Control: Sphinx Software

Note that the free version (which is good enough IMO) will auto-allow Windows Processes (which is good, because you can damage a lot blocking them accidently, and which is bad, as some malware targets Windows Processes to misuse them for it's own activity, which includes sending data over).
You will get a notification (with sound) once a programme tries calling out. If you close the window, the service is blocked until user changes it to allow once / allow by rule.
It remembers services, so they don't need another rule next install.

 

[ChemicalB]

Hows Glasswire compared to comodo firewall? Any pros?

Its firewall is based on Win firewall I think but it is mainly a network monitor which shows connection attempts notifications. I use PRO version, it automatically scans outgoing files on VT. Free version has basic features and it is more limited.

 

[show-Zi]

If the main purpose is 'confirmation' rather than 'control' of communication connection, I think that Glasswire is suitable.

 

[SHvFl]

@Der.Reisende Windows 10 Firewall Control by Sphinx is a really solid program and superior to wfc that just manipulates the windows firewall. Though it has a high price and a really ugly gui.
If I had to choose I would be really unsure because $36 for the plus, that it's the only one worth it after the free, is a lot (maybe if it's lifetime for all future versions I am fine with it). For the normal user though i would recommend the free version of Windows 10 Firewall Control by Sphinx instead of wfc any day.

 

[Der.Reisende]

@Der.Reisende Windows 10 Firewall Control by Sphinx Software is a really solid program and superior to wfc that just manipulates the windows firewall. Though it has a high price and a really ugly gui.
If I had to choose I would be really unsure because $36 for the plus, that it's the only one worth it after the free, is a lot (maybe if it's lifetime for all future versions I am fine with it). For the normal user though i would recommend the free version of Windows 10 Firewall Control by Sphinx Software instead of wfc any day.

Yes, I'm using the Free version also.
Thought about buying the paid one, but:
*after giving the paid ones a try (simply download it), it will bombard you with firewall requests, you might get lazy and allow something that's really malicious (the free one does only ask for non-windows services, which make up most cases and are related to 3rd-party software and or malware)
*not sure whether I have to buy a new key / contact the support once I reset the PC (I don't recall that sentence: "Re-registration is required after upgrade or re-installation onto a different media (backup restoration causes the media virtually changed sometimes). The registration code change confirms the re-registration was required for the reasons above.")

Instead:
*use TCPView when you're paranoid, check out svchost.exe, explorer.exe (definitely malicious, haven't seen it in legit function calling outbound), msbuild.exe,...
*check AutoRuns for suspicious entries regularly
*process hollowing should be detected and prevented by a decent AV

 

[SHvFl]

Yes, I'm using the Free version also.
Thought about buying the paid one, but:
*after giving the paid ones a try (simply download it), it will bombard you with firewall requests, you might get lazy and allow something that's really malicious (the free one does only ask for non-windows services, which make up most cases and are related to 3rd-party software and or malware)
*not sure whether I have to buy a new key / contact the support once I reset the PC (I don't recall that sentence: "Re-registration is required after upgrade or re-installation onto a different media (backup restoration causes the media virtually changed sometimes). The registration code change confirms the re-registration was required for the reasons above.")

Instead:
*use TCPView when you're paranoid, check out svchost.exe, explorer.exe (definitely malicious, haven't seen it in legit function calling outbound), msbuild.exe,...
*check AutoRuns for suspicious entries regularly
*process hollowing should be detected and prevented by a decent AV

From what I see on every major version you have to buy but they give a discount (no clue on amount). The benefit of plus and all above versions is the network zones but that will only be useful to very few users. Is it useful for me, yes. Is it useful for the average user, probably no.
Now about spamming notifications when you tried it, it's normal. It's all the windows processes trying to connect but after you do it once you will not care again. A good practice is to install the firewall after a clean format and just spam allow until windows processes are done. Then you will have little maintenance through time.

 

[RoboMan]

I would suggest keep away from Comodo Firewall if you're a beginner. It's great but has many bugs you have to deal with. I always find out Windows Firewall turns on and blocks applications while CFW is on, for example. Sometimes randomly not starting with Windows...

 

[redsworn]

Hows Glasswire compared to comodo firewall? Any pros?

The pros is it does exactly what OP wants. As good as CF is. It can be quite overwhelming if OP just need a simple connection notification feature.
If he need a more seasoned and complete firewall then obviously CF is the better choice.

 

[notabot]

Its firewall is based on Win firewall I think but it is mainly a network monitor which shows connection attempts notifications. I use PRO version, it automatically scans outgoing files on VT. Free version has basic features and it is more limited.

Out of curiosity, what happens when it’s svchost calling out ?

 

[Atlas147]

No, and I don't even want to, i'm fully satisfied with Windows Firewall.
I still use binisoft WFC for faster rulemaking.

I second this, even though binisoft has sold the product to malwarebytes it's still one of the lightest and easiest product to use.