Enju's Security Config

[Enju]

My first line of defense is Sophos XG running on ESXi, HTTPS scan disabled, Sophos engines enabled, IPS enabled with server rules enabled, still toying around with the settings which are plentiful .
My backup runs weekly and is saved on my Zyxel NAS.
My Kaspersky installation is running on the lowest settings with Trusted Applications mode enabled and trust digitally signed files disabled.

My Proxmox server is the Xeon E3-1225 based Dell T20 with 24GB of ECC RAM.

 

[FireShootSK]

Awesome config @Enju

Only i recommend add BitDefender Trafficlight and PrivaZer

Thanks for share your config.
Sayonara

 

[frogboy]

Nice config.


Thanks for sharing.

 

[miketan77]

Thank you for sharing.
Looks good.

 

[LabZero]

Very good security setup .
You have a reliable backup plan and this is important.
Thanks for sharing

 

[Enju]

Awesome config @Enju

Only i recommend add BitDefender Trafficlight and PrivaZer

Thanks for share your config.
Sayonara

Well I'm not too fond of any "optimization" software outside of the ones included in Windows, same goes for link scanners like Bitdefender, Kaspersky and McAfee. But thank you for your suggestions! Maybe I'll take a look at TrafficLight in my spare time in a VM.

 

[OokamiCreed]

Nothing for me to add. Nice setup and thanks for sharing.

 

[omidomi]

nice config

 

[jamescv7]

A straightforward configuration, no need to install any other software that may result to be redundant.

 

[JM Safe]

A very very good security configuration, only a thing: I suggest you to install BitDefender 60 virus scanner, but it isn't very necessary in this bunker
Thanks for sharing it bro!

 

[Exterminator]

Nice config!!! Thanks for sharing it with us

 

[YuanJiawj]

Nice and a Solid config!! Thanks @Enju for sharing

 

[Enju]

Update:
-removed MBAM Pro
-removed Spotify
-Installed Google Music addon
-Updated VS to 2015

 

[JM Safe]

Update:
-removed MBAM Pro
-removed Spotify
-Installed Google Music addon
-Updated VS to 2015

Great , but why you removed MBAM Pro?

 

[Enju]

Great , but why you removed MBAM Pro?

Bugged out on me, I disabled the realtime protection on startup but it always started again after some time... It's also kinda unnecessary since my security approach is mostly based on whitelisting and blocking stuff on my UTM.

 

[Enju]

Small update:
Switched from ESXi to Proxmox as hypervisor
Switched completely to Windows 10 and removed my current Arch installation
+Installed Macrium Reflect Free as backup solution
-Removed Sandboxie (using a Vbox VM now)
-Removed FreeNAS and switched to a 4bay Zyxel NAS (NAS540)

 

[Cats-4_Owners-2]

Very impressive! Just reading your configuration list makes me sound smarter (& feel taller)!
Thanks for sharing it.

 

[miketan77]

Small update:
Switched from ESXi to Proxmox as hypervisor
Switched completely to Windows 10 and removed my current Arch installation
+Installed Macrium Reflect Free as backup solution
-Removed FreeNAS and switched to a 4bay Zyxel NAS (NAS540)

I guessed your ram is more than 8G due to using Vbox and VM. Are you using SSD storage?
Both virtual machine may eat up your PC's ram.

 

[Enju]

I guessed your ram is more than 8G due to using Vbox and VM. Are you using SSD storage?
Both virtual machine may eat up your PC's ram.

I have 32GB on my desktop and I use a 512GB Crucial SSD for games and my VM.