Re: "hardware" firewalls

From: Mike (info_at_michaelmoyse.co.uk)
Date: 06/30/04


Date: Wed, 30 Jun 2004 19:48:05 +0100

news wrote:
> Why donīt you think some malware protection is enough for outbound
> communication? How about system monitoring like Process guard?
>

Because software running on a machine can be compromised. I cant count
the number of times I seen AV software bypassed and trojan detection
software completely miss trojans.

Social engineering plays a big part. All one needs to do is send a
correctly crafted email that tells the user to do something and they
will turn off their protection just to read that 'Joke' or get the 'fr33
p0rn' or the latest Kylie CD.

Can't actually recall the last time a hardware firewall did any of that.

-- 
------------------------------------
Real email to mike. The header email is a spam trap and you will be 
blacklisted.