Reply to thread

Message

<blockquote data-quote="Brahman" data-source="post: 1049693" data-attributes="member: 11847"><p>You call a system &quot;secure&quot; when it has multiple layers of security software/hardware. Having an antivirus solution is one layer, software firewall another, hips/sandbox is again one of the layer. All these can be provided by one security software, like the one you uses. You can also add system wide DNS firewall ( doH) with solutions like NextDns as an another layer of security. You can also have a Doh enabled router ( like Mikrotik) and forward unencrypted port 53 traffic to encrypted port 443 by using firewall rules. If you setup NextDns with &quot;block bypass methods&quot; under parental control settings and use nextdns in Mikrotik, you can effectively block RAT communication even if it has doh enabled tunnel to C&amp;C. If you want to go further you can have a Hardware Firewall with pfsense or opnsense with Suricata or Squid proxy and analyse encrypted traffic effectively.</p></blockquote><p></p>

[QUOTE="Brahman, post: 1049693, member: 11847"] You call a system "secure" when it has multiple layers of security software/hardware. Having an antivirus solution is one layer, software firewall another, hips/sandbox is again one of the layer. All these can be provided by one security software, like the one you uses. You can also add system wide DNS firewall ( doH) with solutions like NextDns as an another layer of security. You can also have a Doh enabled router ( like Mikrotik) and forward unencrypted port 53 traffic to encrypted port 443 by using firewall rules. If you setup NextDns with "block bypass methods" under parental control settings and use nextdns in Mikrotik, you can effectively block RAT communication even if it has doh enabled tunnel to C&C. If you want to go further you can have a Hardware Firewall with pfsense or opnsense with Suricata or Squid proxy and analyse encrypted traffic effectively. [/QUOTE]

Verification