Chapel Hill's Configuration

[Chapel Hill]

My primary concerns are data theft and financial exploits.

I'm a new poster on the forum, which I have read extensively over the past month. This forum has been very helpful, and I thank you all for that. Comments and recommendations on my configuration welcome.

Can anyone recommend a simple-to-set-up-and-maintain home UTM?

Or, alternatively, can anyone recommend a consumer analog to Palo Alto Networks GlobalProtect service, which is a VPN service backed by a Layer 7 NGFW? Instead of a UTM, if there is a cloud based VPN/NGFW service that seemingly would serve the same function.

I have a couple other computer configurations that i will also post.

 

[Cats-4_Owners-2]

Thank you for such a clearly laid out and impressive configuration, Chapel Hill.
Truth be told, I know very little of UTM. So, I did a search and found a site for Sophos, a name I've heard mentioned by staff, and knowlegeable members whom could well be worthy of sitting at table high upon Mount Olympus!
All kidding aside, it is a name that has stayed with me.

• http://www.sophos.com/en-us/products/unified-threat-management.aspx

Disabling the drivers for vulnerable programs as well as autorun is very intuitive.

I like your configuration for lots of reasons, among them is that it helps me (thanks to you) feel a bit smarter!!

Edit: Can you tell us your impressions of Invincea Free Space?

 

[Chapel Hill]

Edit: Can you tell us your impressions of Invincea Free Space?
----------------

I am a big fan of FreeSpace. In about 1 year of surfing, it has caught about 10 exploits...when it senses something amiss, it alerts for me to do a "Restore". I also use Sandboxie on another laptop, but I like the less-configurable FreeSpace more....it takes less time to learn and is more automated.

 

[Exterminator]

Looks good!! Thanks for sharing your config

 

[Oxygen]

Looks all good to me.

 

[tonibalas]

Very good config and thanks for sharing

 

[scot]

Good configuration. Thanks for sharing with us.

 

[King Alpha]

Nice config! Thanks for sharing!

 

[K Atari]

Great config. I was thinking of disabling webcam drivers too, or I could just be very paranoid.

 

[Chapel Hill]

Updated configuration. Major Changes:

* Now using Sophos Home UTM as a firewall instead of Asus RT-AC87U. Turned the RT-AC87U into an access point. The Sophos Home UTM is simply spectacular!
* Added OpenDNS Umbrella Prosumer Roaming Client
* Added Chrome with uBlock and HTTPS Everywhere
* Added Crowd Strike Crowd Inspect

 

[JM Safe]

Updated configuration. Major Changes:

* Now using Sophos Home UTM as a firewall instead of Asus RT-AC87U. Turned the RT-AC87U into an access point. The Sophos Home UTM is simply spectacular!
* Added OpenDNS Umbrella Prosumer Roaming Client
* Added Chrome with uBlock and HTTPS Everywhere
* Added Crowd Strike Crowd Inspect

Good update, thx for sharing

 

[Cats-4_Owners-2]

Updated configuration. Major Changes:

* Now using Sophos Home UTM as a firewall instead of Asus RT-AC87U. Turned the RT-AC87U into an access point. The Sophos Home UTM is simply spectacular!
* Added OpenDNS Umbrella Prosumer Roaming Client
* Added Chrome with uBlock and HTTPS Everywhere
* Added Crowd Strike Crowd Inspect

I like all of this, and shall catch up through reading (specifically more about your new firewall settings which will most likely result in my being impressed in a more knowingly way!