Network Trust Levels: Which is the Most Secure?

Hi, all.

 

Just curious.  Does the Restricted trust level (being, well, the most "restrictive") make the computer more secure than does the Protected trust level?  Thanks.

 

Screenshot

 

Network Trust Level.jpg

 

 

Hi, all.

 

Just curious.  Does the Restricted trust level (being, well, the most "restrictive") make the computer more secure than does the Protected trust level?  Thanks.

 

Screenshot

 

Network Trust Level.jpg

 

 

Hi, Krusty13.

 

I've seen the above before and always thought that the Restricted trust level was the most secure.  But is it really?  Nowhere in the defintion of Restricted does it mention that you'll be "protected".

Inquirer

 

It depends on what you are trying to achieve. Do you want other computers to be able to access your computer? Restricted will not allow this, but your malware protection from the main Norton product you are using will still be protecting you from malware as you are using the internet.

 

The Trust settings in the Network Security Map only control whether or not other computers on your direct network can access your computer. It has nothing to do with internet protection.

 

 

 

Hi Inquirer,

 

As peterweb said, network trust levels configure how the firewall monitors and controls traffic from your local network only, not the internet.  "Restricted" completely blocks communication from any other device on your network, "Protected" allows communication, but applies the same rigorous firewall rules that are enforced for internet traffic, "Shared" permits some additional specific protocols that allow easier communications among devices on the local network, and "Full Trust" allows unrestricted local traffic while maintaining IPS monitoring for known threats.

Hi, peterweb and SendOfJive.

 

Thanks for the clarification.

 

So if someone or something (virus) takes over the router remotely and then enters my network, would my computer, if set to Restricted, be able to prevent the intruder from accessing it?


Also if this happens, would I be able to see the intruder in the Network Security Map where the #2 arrow is pointing (it's blank now)?

 

Screenshot

 

Network Security Map.jpg

Hi Inquirer,

 

You want to disable remote access in the router to prevent anyone on the internet from being able to hack into the router and change its settings.  You want to use WPA2-AES encryption with a long passphrase to prevent anyone from getting onto your wireless network.  The network trust level would apply to any device on the network, whether it is there legitimately or not.  As devices join the network, they should appear in the Network Security Map, but this does not always happen, so I would not completely trust the map to show everything that might be on your network.


SendOfJive wrote:

Hi Inquirer,

 

You want to disable remote access in the router to prevent anyone on the internet from being able to hack into the router and change its settings.


Thanks, SendOfJive.

 

When you say to "disable remote access in the router", is that meant to be a "general" statement or do you mean it's an actual feature that I can disable in the router dashboard? 

 

The rest is crystal clear.  Thanks, again.

It's an actual feature that allows you to log into the router setup screens from the internet.  Obviously, if the router can't be accessed from outside, your network will be safer.

Got it.  Thanks, again, SendOfJive!