What's the closest equivalent of Little Snitch (Mac program) on Windows?

35

18

I'm using Windows 7 and would like to have a feature like Little Snitch on the Mac that alerts you whenever a program on your computer makes an outgoing connection.

Description of Little Snitch from its website:

A firewall protects your computer against unwanted guests from the Internet. But who protects your private data from being sent out? Little Snitch does!

As soon as you’re connected to the Internet, applications can potentially send whatever information they want to wherever they want.

Sometimes they do this for good reason, on your explicit request. But often they don’t. Little Snitch allows you to intercept these unwanted connection attempts, and lets you decide how to proceed.

Little Snitch informs you whenever a program attempts to establish an outgoing Internet connection. You can then choose to allow or deny this connection, or define a rule how to handle similar, future connection attempts. This reliably prevents private data from being sent out without your knowledge. Little Snitch runs inconspicuously in the background and it can also detect network related activity of viruses, trojans and other malware.

Little Snitch provides flexible configuration options, allowing you to grant specific permissions to your trusted applications or to prevent others from establishing particular Internet connections at all.

So you will only be warned in those cases that really need your attention.

Is there a program like Little Snitch for Windows?

Charles Scowcroft

Posted 2011-03-23T16:58:42.223

Reputation: 455

Question was closed 2015-01-01T18:46:34.220

Please, could you share your own updated (2015 soon) solution/experience? I'm looking for LittleSnitch equivalent for windows 8.1, and found nothing usable and easy to use as LittleSnitch... (yet). – jm666 – 2014-12-31T12:16:54.643

@jm666 Have you tried Windows 8 Firewall Control, as suggested in an answer by Moab? If yes, what about it doesn't work for you?

– galacticninja – 2014-12-31T12:47:03.290

@galacticninja - honestly, not yet. ;) Simply because I added a small bounty - probably in 3 years after the OP question's date are here some news. - Maybe will award Moab's current answer, will see. :) – jm666 – 2014-12-31T13:14:10.853

@jm666 Sorry, but the question in its current form is no longer acceptable here, as it just draws opinionated answers (like you correctly observed) that do not really solve a specific problem. There are two ways to approach this: 1) Post a new question here on Super User, focusing on what you want to do (i.e. block outgoing connections per app), what you've tried and what doesn't work (e.g. "I tried programs X, Y, and Z, but they don't achieve that"). Or 2) re-ask this question as-is on [softwarerecs.SE] – slhck – 2015-01-01T18:48:22.260

@slhck - yeah, you're right. going to ask in SWR. – jm666 – 2015-01-02T09:27:50.033

reworded question on the SWR http://softwarerecs.stackexchange.com/q/15000/5278

– jm666 – 2015-01-02T11:18:26.380

If you're doing development/reverse engineering work as opposed to simply trying to monitor your PC, I might suggest something like Fiddler or Wireshark. Those programs are designed around actually viewing, recording, debugging, modifying, injecting into, and replaying network streams, rather than just getting high level (executable/port level) control of program access. They're not a lot like Little Snitch IIRC, but they're much more helpful for dev work. – Merlyn Morgan-Graham – 2012-03-13T04:22:33.897

Answers

21

I always preferred NetLimiter over any other solution I've tried.

NetLimiter used to be only about bandwidth control and it still shines at that. But a personal firewall feature was added later on.

What primarily distinguishes it from the Windows firewall is that it will not allow any connection attempt to succeed before you decided how you want to handle it. For example:

enter image description here

I have all the options I need right there in that dialog.

  • All connection details.
  • Clicking Connection Info provides access to necessary tools to make the decision if the connection is allowed: enter image description here
  • You can create a permanent rule to allow or deny the process to connect.
  • You can allow the process to connect for as long as it lives. If it is restarted, you'll be asked again.
  • And finally I can allow or deny the connection.

The only way NetLimiter could be better suited for me was if it was free. But, sadly, it isn't. Luckily though, it seems to cost exactly the same as Litte Snitch.

Der Hochstapler

Posted 2011-03-23T16:58:42.223

Reputation: 77 228

Does NetLimiter allow you to configure programs to ask for permission to connect to the internet in the same way that Little Snitch does? – DaveTheMinion – 2016-12-29T04:14:55.560

2That's pretty sweet. It does look to be a good equivalent of LittleSnitch. – None – 2012-11-03T22:35:07.350

5

Would Comodo or other firewalls that do egress monitoring / filtering do the trick?

Eric White

Posted 2011-03-23T16:58:42.223

Reputation: 98

@Silvester Why would malware distributors by an SSL certificate from Comodo when Let's Encrypt would be able to serve their purpose? – DaveTheMinion – 2016-12-29T04:16:42.017

@Silvester Yes, I know. I used Comodo Backup for a while. It was a great piece of software, but I had so many issues with it that I ended up needing to reimage my computer even after an uninstall. It's such a shame. I just do not understand why malware distributors would buy SSL certificates when it is so easy to get them for free. – DaveTheMinion – 2016-12-29T18:25:33.783

+1 for Comodo Firewall I use it and it is probably the best firewall out there – Sandeep Bansal – 2011-10-26T12:56:52.067

Is Comodo as simple and easy to use as Little Snitch (no other bloated features)? I don't really need another firewall, just Little Snitch's feature that prompts the user if a program wants to connect to the Internet, provide info about the connection attempt, and allows the user to deny the connection attempt.

– galacticninja – 2012-04-06T10:28:24.867

1The Firewall built into Windows does that. – Ramhound – 2012-04-06T13:49:19.403

@Ramhound I don't think the default Windows firewall does outbound connection filtering and notification, like what Little Snitch does. On Windows Vista and 7's built-in firewall: "Notifications are not shown however for outbound connections." - http://en.wikipedia.org/wiki/Windows_Firewall#Windows_Vista

– galacticninja – 2012-04-08T10:16:28.283

2

CAREFUL WITH COMODO - I had all kind of problems with it. Also they collect data about you: http://dottech.org/10032/paying-a-price-to-use-free-software-the-dark-side-of-comodo-products/

– Ultralisk – 2013-12-09T16:56:48.830

4

Sorry, but Zone Alarm is nothing like Little Snitch – it fails to show full activity of a program's connection. It just says "Connecting to 127.0.0.1" or "Program attempting to connect to the internet". Zone Alarm Paid version has more information like Little Snitch.

You could always use netstat and Windows' built-in firewall. Just tell Windows Firewall to not allow any connections – but still Little Snitch has a much easier to use interface and shows all incoming and outgoing connections even when they are allowed. A very useful function indeed.

In Windows there is a nice function similar to Little Snitch. Open up Windows Task Manager (one of the most important programs in Windows), then click on the Resource Monitor button. Click on the Network tab. This will show you all ports in use, TCP connections, active connections and how much traffic they are using.

Likewise you can use netstat to see some of the same information in the CMD. Don't forget that firewalls and anti virus applications can cause problems and slow down your PC, so if you're playing video games or crunching numbers, turn them off.

anon

Posted 2011-03-23T16:58:42.223

Reputation: 41

3

OK answers, but as a long time little snitch user, I think I have better possibilities for you :

1 - Zone Alarm : that i've been using for years and is very similar to little snitch (two way communication control). 2 - Outpost security suite: I hear good things of this product and a free version is available.

Have fun,

deijmaster

Posted 2011-03-23T16:58:42.223

Reputation: 212

Any comments on whether Zone Alarm and Outpost Security Suite is as simple and easy to use as Little Snitch (no other bloated features)? I don't really need another firewall as Windows 7's default firewall works fine, just Little Snitch's feature that prompts the user if a program wants to connect to the Internet, provide info about the connection attempt, and allows the user to deny the connection attempt.

– galacticninja – 2012-04-06T10:42:50.683

2

Watchout it appears that ZoneAlarm Free does not block outgoing connections.

– None – 2012-11-03T22:54:09.510

2

Moab

Posted 2011-03-23T16:58:42.223

Reputation: 54 203

1I never get a pop up. version 4.0.144.38, you must have downloaded the pro trial version not the free version. – Moab – 2012-04-08T14:52:28.643

Turns out you are right. I have indeed downloaded the shareware version, not the freeware version. The freeware version seems to be alright and is a good 'Little Snitch' equivalent. Simple and easy to use. An upvote has been given. – galacticninja – 2012-04-09T11:23:21.507

Thanks, The free version does not have the ability to block windows system processes from going out, only the pro version can block these if needed. – Moab – 2012-04-09T14:15:45.383

1

I've used as ZoneAlarm, as Comodo. But since I started using Jetico Personal Firewall, I have no more additional needs. It's very comprehensive and convenient firewall which is powerful enough for a professional! You may check it out by yourself: http://www.jetico.com/firewall-jetico-personal-firewall/

I have no idea why it's not so popular yet...

Iurii

Posted 2011-03-23T16:58:42.223

Reputation: 19

jettico personal is 40 euros !!!!!! – Ultralisk – 2013-12-09T16:58:06.413

1

Another sophisticated firewall product is Online Armor Free that can be downloaded from MajorGeeks.

This is a somewhat geeky but complete product that is also a Host Intrusion Prevention System (HIPS).

From Best Free Firewall Protection :

It has a unique feature called "run safer" that allows you to selectively set risky applications (web browsers, office software, readers/viewers, instant messengers, email or news programs, multimedia software, download managers, etc.) to run as if under a limited user account. It minimizes popup alerts over time with its automatic list of safe programs, your on-demand scans with its safety check wizard, and your responses to popup alerts, especially in cases where you tell it to remember your decisions and have it treat programs as trustworthy.

And finally, there is Little Snitch for WIndows, a commercial product for 24.96$ :

Like Little Snitch, FortKnox gives you complete overview of all incoming and outgoing network communication in an intuitive user interface. 15 days free trial - fully functional.

harrymc

Posted 2011-03-23T16:58:42.223

Reputation: 306 093