Re: Advanced Rules/Advanced Application Configuration

From: Duane Arnold (notme_at_notme.com)
Date: 10/12/05 

Date: Wed, 12 Oct 2005 18:46:47 GMT

Casey Klc <casey@notspecified.net> wrote in
news:MPG.1db70de7fcd5b4ab9896da@news.east.earthlink.net:

>
>>
>> Don't use Application Control like the worthless crutch that it is
that
>> can easily be beaten by malware.
>>
>> Duane :)
>>
>>
> Nonsense. Your caution should have stated.....Don't download malware
> off internet and don't accept an email malware attachment.
> Sygate is an excellent firewall when properly setup to "Block
Everything
> you Don't Use".
> Casey
>

Nonsense back to you and App Control in a PFW solution can be beaten at
the computer boot and logon process. I have tested Sygate and most of the
3rd party solutions for this. And Sygate can be beaten at that time like
the rest of the 3rd party solutions, since it is not an integrated part
of the O/S that can get to the TCP/IP connection first before anything
else such as malware. Application Control is worthless in PFW solutions
for the most part and may hold a little value (that's very little IMHO)
if the machine is never booted. I am sure there are other ways to beat it
but at the boot I am for sure.

And anyone using a PFW solution like a crutch and depends solely upon
such a solution to control program and/or have the solution tell them
what's happening on the machine without look for themselves with other
tools or control what's happening with a program through the O/S has
already lost.

And on top of that, I don't even consider a PFW solution to be a FW
solution since it doesn't separate two networks but only provides machine
level protection for the O/S and Internet applications running on the
machine. But that's my opinion of a PFW solution.

Duane :)

 

Relevant Pages

  • Re: Advanced Rules/Advanced Application Configuration
    ... >> off internet and don't accept an email malware attachment. ... > Nonsense back to you and App Control in a PFW solution can be beaten at ... And Sygate can be beaten at that time like ... Application Control is worthless in PFW solutions ...
    (comp.security.firewalls)
  • Re: Advanced Rules/Advanced Application Configuration
    ... I have tested Sygate and most ... Application Control is ... with the O/S that's going allow the Sygate exe to start before anything ... >> And on top of that, I don't even consider a PFW solution to be a FW ...
    (comp.security.firewalls)
  • Re: Active Ports
    ... >> I don't know Application Control. ... That is App Control in a PFW solution asking the question. ... but I need to find the process that is initiating those attempts. ...
    (comp.security.firewalls)
  • Re: Active Ports
    ... That is App Control in a PFW solution asking the question. ...
    (comp.security.firewalls)
  • Re: Internet Security
    ... so called outbound "control" feature. ... Promoting the idea that malware is somehow controllable ... You stay away from viruses by not installing them. ... security is a question of installing as much security software as ...
    (microsoft.public.windowsxp.security_admin)
Quantcast