Are Desktop Firewalls Overkill?

Barence writes "Should you be running firewalls on your desktop and server machines? PC Pro's Jon Honeyball argues the case for switching off Windows firewalls and handing over responsibility for security to server-based solutions. 'I'd rather have security baked right into my network design than scattered willy-nilly around my desktops and servers,' Honeyball argues. 'It seems to me that there's much sense in concentrating your security into a small number of trusty gatekeepers rather than relying on a fog of barely managed faux security devices. Of course, it puts your eggs into fewer baskets, but it does mean these gatekeepers are easier to control and manage: monitoring them in real-time becomes routine.'"

Comments

Why are firewalls that important anyhow?

[bussdriver]

I don't see why there is so much stress on firewalls. Nobody should have insecure ports open they are not using. Fix the systems don't obscure their security holes.

Yes, software is flawed etc but if you need that port open the firewall isn't going to do much. Too much is put onto firewalls as the solution to all our problems.

You shouldn't need a desktop firewall unless your system is BROKEN by design.

Outgoing connections are another issue:
Actually, all OS should include an update API! The API can protect against information loss under the guise of software updates. Security / Privacy are still way behind.

Re:stating the obvious...

[Anonymous Coward]

You have that level of fear of home invasion, that not only do you have a firearm in your bedroom, but you lock an internal door?

I think that living with that kind of fear all the time would be worse off than any damage a home invader could do... I can only assume you are located in america, africa, or some other 3rd world country.