| − | Software firewalls are not typically considered a good first line of defense, but a good addition to a tiered defense system. They digitally intercept and attempt to analyze traffic on the client's system. Since this kind of firewall operates on the [[OSI model]]'s application layer, it has an easier time of understanding what the communication link is being used for.<br /> | + | Software firewalls are not typically considered a good first line of defense, but a good addition to a tiered defense system. They digitally intercept and attempt to analyze traffic on the client's system. Since this kind of firewall operates on the [[OSI model]]'s application layer, it has an easier time of understanding what the communication link is being used for. Additionally, this host firewall filters traffic within the [[local area network]], meaning that unwanted traffic from other hosts behind the perimeter firewall can still be blocked. |
| − | However, this unwanted communication must be blocked at the computer (or mobile device), so the communication has already gotten through the hardware firewall (assuming there is one). Although the attempt was still ignored, the external entity now knows there is at least one active device at that IP address.<ref name="WhatIsMyIPAddress.com">“What is a Firewall?” WhatIsMyIPAddress.com, whatismyipaddress.com/firewall. Accessed 7 Sept. 2017.</ref>
| + | [[File:Https://technet.microsoft.com/en-us/library/ff602917(v=ws.10).aspx|thumbnail]] |
| | + | A disadvantage of software firewalls is that unwanted communication coming from the internet must in this case be blocked at the computer (or mobile device), so by this time, the communication has already gotten through the hardware firewall (assuming there is one). Although the attempt was still ignored, the external entity now knows there is at least one active device at that IP address.<ref name="WhatIsMyIPAddress.com">“What is a Firewall?” WhatIsMyIPAddress.com, whatismyipaddress.com/firewall. Accessed 7 Sept. 2017.</ref> |