I have a few questions for the product Cylance Smart AV. I was browsing around looking for AV solutions, when I stumbled across Cylance Smart AV. I was initially impressed, until I realized that this product is really only a File Scanner that has a Behavioral component. These are now my questions:
1. Say a file, not yet determined as malicious, is ran and attempts to connect to a malicious server. These files don't use browsers to connect, so a web browser extension won't block this. Since CSAV doesn't had a Web Traffic Scanning component, how will it protect in this scenario?
2. Does CSAV have Application Control in this package?
3. Does CSAV have exploit protection? Since this product doesn't have a Firewall or a Firewall Booster even (eg. Trend Micro, Emsisoft, F-Secure.), how will it protect against hackers trying to exploit the system?
4. Will Cylance add the missing components anytime soon?
1. Say a file, not yet determined as malicious, is ran and attempts to connect to a malicious server. These files don't use browsers to connect, so a web browser extension won't block this. Since CSAV doesn't had a Web Traffic Scanning component, how will it protect in this scenario?
If the file runs without being detected it won't stop the traffic. If you want something that does, you should be using an outbound firewall of some sort. Web traffic scanning is generally very poorly done by Anti-Malware programs to the point where they introduce vulnerabilities into the system that weren't there before. If the address that the malware connects to isn't in your web-components database it wont stop the connection out anyway, so you are serviced far better running something like commodo firewall than relying on a traffic scanner by an anti-virus.
2. Does CSAV have Application Control in this package?
What do you mean by application control?
3. Does CSAV have exploit protection? Since this product doesn't have a Firewall or a Firewall Booster even (eg. Trend Micro, Emsisoft, F-Secure.), how will it protect against hackers trying to exploit the system?
I'm not certain about the exploit protection. I haven't read anything suggesting that it dosen't, but that does not mean that they've included it in the home-user version. Trend, Emsisoft, F-Secure all leverage the windows firewall. The windows firewall is excellent at stoping inbound attackers by itself. They each have their own scheme to bolster it, but if you want something that will control outbound connections you're far better off with WFC or Comodo.
4. Will Cylance add the missing components anytime soon?
I don't think anyone knows the answer to this.
