Expert: James Filmer - 2/7/2009

Question
Hello. I have recently had trouble with my McAfee antivirus software. I keep getting viruses that deactivate it. I've tried to fix it but found McAfee to be useless. I changed to Avast, which seems to be working better. However, my question is regarding their firewall. They have what is described as a 'lightweight firewall' and I'm wondering how that differs from my McAfee firewall. I want to uninstall McAfee completely, but am afraid to in case they have a better firewall and the Avast 'lightweight firewall' won't be enough.

Thank you so much for your time.

Answer
Hi Patricia,

"Lightweight" usually means it doesn't use a large amount of system resources, which can noticeably slow a computer down, not whether it's better or not. This term is used by many security software developers.

About Avast, they are specialists in anti-virus software, not firewalls. They do have a Security Suite that includes Anti-spyware and anti-rootkit tools, but having recently reviewed their products don't see an actual Firewall application as part of the suite. (If there's a new suite I'm not aware of, please let me know)

About a Firewall, you need one. Since McAfee Personal Firewall Plus is available only in one of their three suites (VirusScanPlus, Internet Security Suite, and Total Protection Suite), you will be removing their Firewall and anti-virus leaving you without a Firewall.

If you remove it, enable Windows Firewall even if you're using the Avast Security Suite.

Keep in mind that only one anti-virus and one Firewall program should be running on a system at one time.

Http://netsecurity.about.com/od/hackertools/a/aa072004.htm gives you some basic information about what a Firewall does - very different than anti-virus or anti-spyware software. Enrgy21.com also has Firewall basics/reviews links (Gizmo's Freeware and Firewall Guide/Site tools page among others)

So the question is now, "What Firewall is best for you?". There are several excellent ones: free, limited versions as well as full/paid versions with additional security tools.

Having tried most of the current reputable ones, the best will be the one that you tried, found it easy to set up and configure (if desired or necessary), didn't interfere with other applications, slow down your system or make it unstable.

After checking the reviews, I'd pick three and begin with the one that on the surface sounds like it might work for you. Then, be prepared to remove it at anytime, moving on to the second (and 3rd) choice if necessary.

As far as which one is "better" or best, the answer has more to do with your personal preferences. They all control incoming and ongoing internet traffic and all have default settings that don't require special configuration techniques, but even default settings aren't easily understood by everyone equally.

If you need more info, just let me know. I would love to say this one or that one is better or worse, but as long as the one you ultimately choose is one of the Top 10, you'll be fine. Need more info, just let me know.