Question

Why are host-based firewalls a useful tool for OS hardening?

Answer 1

`Hey,

Note: Brother in case of any queries, just comment in box I would be very happy to assist all your queries

• Protection Against Firewall Failure – Adding another firewall of different design is helpful in case the primary firewall fails, because most likely the attack or problem that causes the primary firewall failure will not affect the host-based firewall similarly. Multiple firewalls do not offer increased protection against attacks directed at vulnerabilities in applications or operating systems.

• Protection Against a Wider Number of Threats – The host-based firewall can protect against threats originating from within a corporate network, and can help mitigate the risks of badly configured software on a host.

• Specificity – A host-based firewall can be tuned to support a single set of applications and to block everything else. Perimeter firewalls are usually configured with a rule set designed to support many applications, and consequentially are much more likely to have exploitable weaknesses.

Kindly revert for any queries

Thanks.