Reply
GORPY1
Posts: 849
Topics: 161
Kudos: 50
Solutions: 30
Registered: ‎09-26-2008

Re: NIS 2011 Firewall Question

[ Edited ]

AllenM wrote:

HI Gorpy1,

 

SInce you have but one computer (one network device is actually more accurate) it really doesn't do anything functional. It will simply set the LAN interface to shared trust. Later, if/when you add another network device or computer to your home network it will automatically inherit the Trust level of the LAN interface. Shared is the default and recommended unless there is an explicit reason to change it.

 

I also want to see if this will have any affect on you being asked the question at startup.

 

Hope this helps.

 

Best wishes.

Allen


Hi Allen.....I'm at Protected Level..I went to Edit it and it said  Unless I'm sharing files and printers on this computer etc., I'm protected from known attacks, etc. at this level.It Says Symantec suggests this setting.. The only question I'm asked at startup regards seeing Trust or Restrict on two protected connections I noticed lt also says in Advanced Security detailsin Firewall Network and Connections that Recommended Actions.are.No actions are required, I hope I'm not confusing you I had this way with NIS 2010, I'm going to get you a screenshot of what I'm talking about and thanks for everything though I know my options now and I believe I'll keep it this way for now, Unless you feel Strongly it should be changed, Thanks......Gorpy1 P.S Give me a day or two to get you that screenshot, sorry I've been kinda busy., Thanks again 

Thank God for people that can help!!!
AllenM
Posts: 10,206
Topics: 221
Kudos: 2,143
Solutions: 377
Registered: ‎12-14-2008

Re: NIS 2011 Firewall Question

Hi Gorpy1,

 

I'm not convinced of the Protected trust level, I've seen it cause problems before. I would defnitely NOT recommend Full Trust for the LAN device.

 

In your case I think it should be fine since you have only one computer anyway. Just something to keep in mind that if / when you add another computer to your network you might have to revisit this. :smileywink:

 

Best wishes.

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
GORPY1
Posts: 849
Topics: 161
Kudos: 50
Solutions: 30
Registered: ‎09-26-2008

Re: NIS 2011 Firewall Question


AllenM wrote:

HI Gorpy1,

 

SInce you have but one computer (one network device is actually more accurate) it really doesn't do anything functional. It will simply set the LAN interface to shared trust. Later, if/when you add another network device or computer to your home network it will automatically inherit the Trust level of the LAN interface. Shared is the default and recommended unless there is an explicit reason to change it.

 

I also want to see if this will have any affect on you being asked the question at startup.

 

Hope this helps.

 

Best wishes.

Allen


Hi Allen One more question like what kind of network device, I only have a printer  and a new webcam (which is kinda of a pain and right now I don't trust) Is that what you mean when you say network device......Thanks, Gorpy1

Thank God for people that can help!!!
AllenM
Posts: 10,206
Topics: 221
Kudos: 2,143
Solutions: 377
Registered: ‎12-14-2008

Re: NIS 2011 Firewall Question

Hi Gorpy1,

 

Yes if these devices are network / IP aware and show up in the Network Security map then they are network devices for purposes of this discussion.

 

Just so you know you can set the LAN interface to say "Shared" and still set other individual network devices to "Restricted".

 

Basically other devices will "inherit" the trust level of the LAN interface by default but you can then change indvidual devices to a different trust level on a device by device basis.

 

Hope this explains a bit more.

 

Best wishes.

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
GORPY1
Posts: 849
Topics: 161
Kudos: 50
Solutions: 30
Registered: ‎09-26-2008

Re: NIS 2011 Firewall Question


AllenM wrote:

Hi Gorpy1,

 

I'm not convinced of the Protected trust level, I've seen it cause problems before. I would defnitely NOT recommend Full Trust for the LAN device.

 

In your case I think it should be fine since you have only one computer anyway. Just something to keep in mind that if / when you add another computer to your network you might have to revisit this. :smileywink:

 

Best wishes.

Allen


Hi Allen well that gives me Pause, What kind of problems, Serious problems, Answer me whenever, I'll accept your response and close this thread.....Gorpy1..P.S If you want or when you have time.

Thank God for people that can help!!!
GORPY1
Posts: 849
Topics: 161
Kudos: 50
Solutions: 30
Registered: ‎09-26-2008

Re: NIS 2011 Firewall Question


AllenM wrote:

Hi Gorpy1,

 

Yes if these devices are network / IP aware and show up in the Network Security map then they are network devices for purposes of this discussion.

 

Just so you know you can set the LAN interface to say "Shared" and still set other individual network devices to "Restricted".

 

Basically other devices will "inherit" the trust level of the LAN interface by default but you can then change indvidual devices to a different trust level on a device by device basis.

 

Hope this explains a bit more.

 

Best wishes.

Allen


Thanks Allen Once you change it I don't suppose you can change it back can you......Gorpy1

Thank God for people that can help!!!
AllenM
Posts: 10,206
Topics: 221
Kudos: 2,143
Solutions: 377
Registered: ‎12-14-2008

Re: NIS 2011 Firewall Question

Hi Gorpy1,

 

No problem, I live on the forums anyway. :smileytongue: No, not serious problems and again in your case I really doubt it would cause problems.

 

Typically it is when more than one computer is on the network and in most home networks there is at least some amount of "sharing" that needs to take place between them.

 

You are absolutely OK with setting it to Protected and if you ever do connect another computer to your home network and it did cause any problems it would probably be along the lines of not being able to access files on the other computer or some such thing. It would not be a serious problem by any stretch, more just an annoyance. :smileywink:

 

Best wishes.

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
AllenM
Posts: 10,206
Topics: 221
Kudos: 2,143
Solutions: 377
Registered: ‎12-14-2008

Re: NIS 2011 Firewall Question


GORPY1 wrote:

 

Thanks Allen Once you change it I don't suppose you can change it back can you......Gorpy1


Hi Gorpy1,

 

Absolutely, you can change the trust level any time you want. Just click the Edit button next to the LAN interface or click on the device of choice at the top of the window and then click Edit next to where it shows the trust level for that device.

 

Best wishes.

Allen

Windows 7 Ultimate SP 1, 32 bit, 4 GB * NIS 2012 (19.8.0.14) * Ghost 15 * IE 9, Firefox, Safari.
Test laptop with W7 Home Premium 64 bit * NIS 2012 (19.8.0.14)
GORPY1
Posts: 849
Topics: 161
Kudos: 50
Solutions: 30
Registered: ‎09-26-2008

Re: NIS 2011 Firewall Question


AllenM wrote:

Hi Gorpy1,

 

No problem, I live on the forums anyway. :smileytongue: No, not serious problems and again in your case I really doubt it would cause problems.

 

Typically it is when more than one computer is on the network and in most home networks there is at least some amount of "sharing" that needs to take place between them.

 

You are absolutely OK with setting it to Protected and if you ever do connect another computer to your home network and it did cause any problems it would probably be along the lines of not being able to access files on the other computer or some such thing. It would not be a serious problem by any stretch, more just an annoyance. :smileywink:

 

Best wishes.

Allen


Thanks Allen, I accepted your solution, Now I know what to do...Thanks again......Gorpy1

Thank God for people that can help!!!