Kudos0

Improve Firewall

Posted: 20-May-2010 | 11:19AM · 4 Replies ·

Inprove firewall by change from the current one that allow all process by default. Change to use rating from insight. If any process try to connect internet norton will check from insight. If it safe automatic allow rule. If don't know this process or not sure will show popup for user to decide. In this case we can use the storng point of insight to decrease annoy popup that the other firewall face and can significantly improve the security of firewall for outbound connection.
Labels: Firewall

Replies

Kudos0

Re: Improve Firewall

Posted: 20-May-2010 | 11:19AM · Permalink

Inprove firewall by change from the current one that allow all process by default. Change to use rating from insight. If any process try to connect internet norton will check from insight. If it safe automatic allow rule. If don't know this process or not sure will show popup for user to decide. In this case we can use the storng point of insight to decrease annoy popup that the other firewall face and can significantly improve the security of firewall for outbound connection.
Kudos0

Re: Improve Firewall

Posted: 20-May-2010 | 11:27AM · Permalink

Why I need this function. Everyone know that none of antivirus in the world have 100% detection rate. Some virus can be missed. For easier to understand, I will use this case as an example. If keylogger name is abc.exe and it was not detect as a keylogger by antivirus. It was set to call back home to send the log every 2 hours by txt file. In this case, process abc.exe will connect to send the data by port 80 (or other port) Process abc.exe will be automatic allow by default. It will send the data without any blocking from firewall and the user will know nothing. If we chage to use insight rating as the first comment, It will show the popup that customer will know that something try to connect the internet. But if the legimate software that insight know it, it will automatic allow without annoy popup to the customer
Kudos0

Re: Improve Firewall

Posted: 22-May-2010 | 8:06AM · Permalink

This would be great as an advanced option.
Kudos0

Re: Improve Firewall

Posted: 28-May-2010 | 4:59AM · Permalink

I believe what you are asking for is already in the product. SONAR is tied to the firewall and SONAR is using different events and information (including Insight ratings) to decide whether an application is safe to connect to the internet.