Software firewall Vs. Hardware firewall

[Firus]

I would just like to know what you people think is more effective as a firewall:
A certain software like say, ZoneAlarm, or a hardware type, as in a Router/firewall type thing? Like which one is tougher to get through? I know it is possible to get through the hardware ones, but I really don't know about the pros and cons of each...can you help me out?
Thanks,

-Benson

 

[n0cmonkey]

All firewalls can be gotten through. The ruleset is very important, and if you set it up poorly, it is just as bad as having no firewall. Hardware firewalls (that run something I call software, but some people disagree) are fine, but expensive for the ones worth the money. Software firewalls are fine. Personally, I use a dedicated firewall machine running a software firewall and software firewalls on the client machines.

 

[WannaFly]

The major difference between software and hardware is that the software can notify you when something is trying to access the internet - and it'll tell you what program and where its trying to connect. Hardware firewalls cant tell you what PROGRAM is accessing. Like n0cmonkey said a ruleset is EXTREMLY important. I have a certian server sitting on the internet with NO hardwall protection but I have the software setup to deny EVERYTHING except what i want, and i also have a program to automatically restart it if it crashes.