
Learn about firewalls and how to set one up to protect your computer.
Firewalls defend computers and systems from viruses and other security threats. UCSD Minimum Network Connection Standards require firewall and anti-virus protection for any device connected to UCSD's network. Regular backups and security patch updates also help protect your system.
Packets, or bits of information, constantly travel over the network and can contain harmfulmessages that compromise a system's normal operation. "Host-based" firewalls control incoming andoutgoing network traffic on individual machines (or "hosts"). These firewalls check each packet'ssource, destination address, port, type, etc., and then determine whether to allow them into themachine.
A "basic" firewall setup either comes with your operating system or through a third-party purchase, and allows normal computer use for most users on campus. Hosts with more complex protocols may need "advanced" configuration. Even if your department uses hardware firewalls, additional host-based firewalls help. In either case, firewalls log activity for inspection, warn of harmful activity, or prevent malicious software from attacking other network devices.
Host-based firewalls that connect to UCSD's network must allow incoming Internet ControlMessage Protocol (ICMP) or "echo" requests. UCSD's Network Security group must be able tocommunicate these requests with your machine if they suspect malicious software has infected it. All firewall instructions include directions for enabling ICMP or echo requests.
Not all firewall exception requests are harmless. After you set up a firewall, viruses and worms may prompt you to allow their connections. Firewalls can't function as effective security tools if configured to accept every request. Before clicking the OK button, consider whether or not you want to run the requested application on your system.