Firewalls
We would normally recommend using a network based firewall setup like pfSense or OPNsense which are routing operating systems that you can set up a network wide firewall and routing (much better than what the ISP provides) but that requires a lot of work, extra hardware and knowledge on this stuff. This is more aimed at the day to day Windows user who needs something without going far into the rabbit hole.
Firewall software is a security application installed directly on a computer, server, or virtual machine to monitor and control incoming and outgoing network traffic based on predefined security rules. Unlike hardware firewalls that protect an entire network, software firewalls provide endpoint-level protection, filtering data packets to block unauthorized access, malware, and suspicious activity specific to that individual device.
Recommendations:
- Windows Built-in Firewall
If you are on Windows 10/11, the built in Windows Firewall serves its purpose just fine. Very basic in use but it works. Mind you, it wont block outbound information that Windows allows for data collection. Watch this video for more information (he is using portmaster which I highly recommend):
You can enhance the performance of Windows Firewall with more control with WFC by Malwarebytes:
Portmaster is a free and open-source application firewall. Monitor every network connection on your computer and set per-application rules for what to block. I Highly recommend this one for ease of use while giving you lot more information and control. The free version works just fine but the paid version will of course give you a lot more features. But features that aren't necessarily useful for day-to-day user.
See video above under Windows Built in Firewall to get info on Portmaster.
Description:
Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
The lightweight application is less than a megabyte, and it is compatible with Windows 7 SP1 and higher operating systems. You can download either the installer or portable version. For correct working you are require administrator rights.
Keep in mind, simplewall is not a control UI over Windows Firewall, and does not interact in any level with Windows Firewall. It works over Windows Filtering Platform (WFP) which is a set of internal API and system services that provide a platform for creating network filtering applications. Windows Filtering Platform is a development technology and not a firewall itself, but simplewall is the tool that uses this technology.
This one requires a little bit of work. It has come recommended, it is on github and its free, which is important! If need assistance on setting up, check out techradars article on it: https://www.techradar.com/reviews/tinywall
Features
- Non-intrusive operation
TinyWall lets you work while protecting you. No annoying popups and simple configuration.
- Lightweight
TinyWall's performance impact is neglible. It barely uses any resources on your computer.
- More than your average
Tampering protection, blocklists, temporary firewall rules, UWP-support, boot-time filtering, and many-many more features.
- Safe operation
No drivers or kernel-components are installed, which keeps your system stable.
Convenient
Lots of convenience features make TinyWall very easy to use for almost anybody.
No cost
100% free, no ads, no artifical limitations, no upgrades. Also no data-collection and no telemetry behind your back.