Windows Firewall - Good Enough?

Is it good enough to run a medium size website?

[Herath]

How good is the Windows XP firewall when it comes to DOS attacks, etc compared to hardware firewalls?

Our collocation service providers don't give us a firewall, so we are wondering if to put a cheap Linksys DSL router as the firewall or depend on the Windows XP built in firewall. (The web server is iPlanet Java webserver running on XP pro).

Thanks.

[txbakers]

I prefer an external hardware device. Linksys is a good choice - now owned by Cisco.

[DaveAtIFG]

If your site generates significant revenue, a hardware firewall is the cheapest insurance you can buy.

[isitreal]

I believe that among hackers software firewalls are the cause of great happiness. Especially windows ones. Keep in mind that the person you're trying to keep out is already in your box by the time the software firewall kicks in. All security experts I've ever read state without any question that a hardware firewall is the only protection that is genuine. But be careful with cheap routers, routers have very different throughput rates, there was an article in pcworld about that last year, the difference is quite large between high end ones and the cheapos, more than 2 to 1 if I remember right.

[mcavic]

I agree that hardware firewalls are the way to go. This is my favorite [cdw.com], though it's a newer model than the one I've used, and not quite cheap.

Software firewalls are good for individual workstations that aren't otherwise protected.