Serious Discussion “Strongest” security solution.

General Security Discussions
153 Replies 27,883 Views
valvaris said:
In terms of Strongest Security Solution.

[Oversimplified]

Is to start with how you connect to the Internet? (Ethernet / WiFi)

Then what Router to use? (My Recommendation would be a Firewall Appliance.)

Even so how is your Network Segmented or is it even? (Attack Surface Reduction, Control and Visibility)

After all that then we can start looking to are other Devices on the same Network? (IoT, SmartTV and such...)

Why these questions?
- Without that an attacker could still be persistent inside the Network over another device for example.
- Security Suite is just another Software that does things....
- Security should Start with the User and an IT-Security-Solution tailor made for the specific situation with all the OSI Layers in mind.
- There is no 100% Security.
- With huge budget you can have Enterprise grade security without lifting a finger if installed properly. ----> The Security focused solutions and highend use MDR Services (There is an IT-Security SOC Team 24/7 Monitoring your Systems) some even offer monitoring from the Gateway (Firewall) / Network and Endpoints (Clients and Server)
- Like always it is all about Money $$$$

Sincerely
Val.
Click to expand...
For my needs, I'm looking for a strong PC security solution to protect my new computer from any malware or damage to it caused by software.
Currently I am rocking a Kaspersky Premium Default Deny Setup. I plan to switch to possibly another solution like Deep Instinct, Cortex, or CheckPoint Harmony in April 2024 when my Kaspersky subscription ends.
I know there is not 100% security, but the goal is to get as close to it as possible. I'm a home user, not a business worker or anyone who should experience targeted attacks or sophisticated APTs that anti-viruses/security companies dont know about.
 
Advertisements
Xeno1234 said:
For my needs, I'm looking for a strong PC security solution to protect my new computer from any malware or damage to it caused by software.
Currently I am rocking a Kaspersky Premium Default Deny Setup. I plan to switch to possibly another solution like Deep Instinct, Cortex, or CheckPoint Harmony in April 2024 when my Kaspersky subscription ends.
I know there is not 100% security, but the goal is to get as close to it as possible. I'm a home user, not a business worker or anyone who should experience targeted attacks or sophisticated APTs that anti-viruses/security companies dont know about.
Click to expand...
In good conscious I could never recommend Costumer grade AVs. (Some come with nag-screens others with so much bloat that slows down everything and looks like an AD-Show)

I had a combo once but wanted to go to a single robust solution that is manageable.

Combo was:
F-Secure (Only Malware-Scanner), Glasswire and Windows Software Restriction Policy (NOT AppLocker [Nighmare to Setup])

Now I use:
Sophos Intercept X Advanced with XDR (Live-Response and Datalake) <- No need if you do not want to mingle around with Querys in XDR -> The Sophos Intercept X Advanced is good enough.
Setup the following Policys:
- Threat Protection for Exclusions (Some Hollow Process Alerts from Apps that have odd Steam integration)
- SSL/TLS decryption of HTTPS websites
- Web Control (Best part you can block Top Level Domains)
- Application Control
- and a few more settings that are there out of the box.
Been using this on my Gaming Rig with no issues on Windows 11 23H2

Sincerely
Val.
 
Last edited:
valvaris said:
In good conscious I could never recommend Costumer grade AVs. (Some come with nag-screens others with so much bloat that slows down everything and looks like an AD-Show)

I had a combo once but wanted to go to a single robust solution that is manageable.

Combo was:
F-Secure (Only Malware-Scanner), Glasswire and Windows Software Restriction Policy (NOT AppLocker [Nighmare to Setup])

Now I use:
Sophos Intercept X Advanced with XDR (Live-Response and Datalake) <- No need if you do not want to mingle around with Querys in XDR -> The Sophos Intercept X Advanced is good enough.
Setup the following Policys:
- Threat Protection for Exclusions (Some Hollow Process Alerts from Apps that have odd Steam integration)
- SSL/TLS decryption of HTTPS websites
- Web Control (Best part you can block Top Level Domains)
- Application Control
- and a few more settings that are there out of the box.
Been using this on my Gaming Rig with no issues on Windows 11 23H2

Sincerely
Val.
Click to expand...
How much does Intercept X cost?
 
Advertisements
Xeno1234 said:
Can’t you ourchase Norton Firewall separately? I might try it out in aggressive.
Click to expand...
No, it's not possible anymore. Pre-2010 was the last known period where users could buy Norton Personal Firewall as a separate purchase.

There is not much choice when it comes to standalone Firewall software that are not WFP-based.

In 2014, in an effort to streamline its Norton product line, Symantec combined nine standalone Norton products into one all-purpose suite
Click to expand...
Wiki: Norton Security - Wikipedia
Related: PC Tools (company) - Wikipedia
 
Ink said:
No, it's not possible anymore. Pre-2010 was the last known period where users could buy Norton Personal Firewall as a separate purchase.

There is not much choice when it comes to standalone Firewall software that are not WFP-based.


Wiki: Norton Security - Wikipedia
Related: PC Tools (company) - Wikipedia
Click to expand...
In that case would it be better to use windows firewall with additional hardening rules?
 
Ultimate Vision said:
This will increase low risk detections but may also increase false positives.
Click to expand...
yes, aware of possible increase of false+ but I'm careful to double check everything / anything. It is rare for me to get any fp or alerts, although Norton popped up an alert for gmpopenh264.dll shortly after I opened Firefox, and before I could do anything, ie, seconds, Norton said it was safe and popup disappeared, and this was with BB on Automatic (not Aggressive). But I checked it out anyway. I have not run this VM with Norton for several weeks. This win10_vm is fast responsive, and I'm liking Norton, but it's not my daily vm.
 
Xeno1234 said:
Right now there are 4 solutions im looking at.

1: Kaspersky Premium
2: Deep Instinct
3: CheckPoint Harmony
4: Cortex XDR

I know a good amount about Harmony and DI, however I don’t know pricing for either or anything about Cortex besides it’s very, very good.

Does anyone have more information about any of these products or recommendations?

Currently I am paying 100 USD Yearly for Kaspersky and I want something a bit cheaper.
Click to expand...
Not sure if I'm allowed to post but there are all kind of sites that sell it
One that has some of the better pricing is this one 14$ for harmony endpoint they have an ebay listing if you prefer extra protection from ebay
slavacomputers.com

CheckPoint License Software Harmony Endpoint Basic Protection CP-HAR-EP-BASIC-1Y

Basic threat protection for Endpoint devices, includes Web Protection, forensics Access and Data protection, for 3 year CP-HAR-EP-BASIC-1Y
slavacomputers.com
 
Vitali Ortzi said:
Not sure if I'm allowed to post but there are all kind of sites that sell it
One that has some of the better pricing is this one 14$ for harmony endpoint they have an ebay listing if you prefer extra protection from ebay
slavacomputers.com

CheckPoint License Software Harmony Endpoint Basic Protection CP-HAR-EP-BASIC-1Y

Basic threat protection for Endpoint devices, includes Web Protection, forensics Access and Data protection, for 3 year CP-HAR-EP-BASIC-1Y
slavacomputers.com
Click to expand...
Are you sure these are legitimate though?
 
Xeno1234 said:
Are you sure these are legitimate though?
Click to expand...
Its Israeli based verified reseller and have options like ebay / PayPal for payment
And you can always chargeback
other sites probably are legitimate too but usually more expansive as well some being from countries with worse usa relationship
but who cares you could just chargeback
Personally recommend PayPal just to reduce chances of pishing
 

Recently browsing

Members who viewed this thread in the last 5 minutes

You may also like...

Back
Top