Is it a complete firewall module? Given that F-Secure is now using Avira SDK for its products, will we have a complete Avira firewall module here (will be good news for me)?
F-secure protection introducing firewall in the latest updates?
- Thread starter RRlight
- Start date
This is not a full firewall module, hence it is called a sensor. It will extract raw data, but it won’t be pulling any triggers on files or packets.
It looks like F-Secure is upping up the detection of botnets which is extremely pleasant to see. Looking at the network activity (even if it’s not a proper IPS but just inspects the domains and ports) allows F-Secure to:
-Run heuristics that flag connections to suspicious top level domains such as xyz, abused services and so on. These, according to explanations, can add confidence to the detections and can make a difference from not detected at all, to at least terminated as low confidence detection.
-F-Secure could use both proprietary and third-party databases to detect high confidence botnet activity.
With these protections F-secure will much more effectively handle bots, infostealers, fileless malware and so on.
A litte bit late to the party, but better late than never.
The firewall sensor may as well be part of the avira behavioural blocking SDK.
It looks like F-Secure is upping up the detection of botnets which is extremely pleasant to see. Looking at the network activity (even if it’s not a proper IPS but just inspects the domains and ports) allows F-Secure to:
-Run heuristics that flag connections to suspicious top level domains such as xyz, abused services and so on. These, according to explanations, can add confidence to the detections and can make a difference from not detected at all, to at least terminated as low confidence detection.
-F-Secure could use both proprietary and third-party databases to detect high confidence botnet activity.
With these protections F-secure will much more effectively handle bots, infostealers, fileless malware and so on.
A litte bit late to the party, but better late than never.
The firewall sensor may as well be part of the avira behavioural blocking SDK.
Last edited:
Nice assessment of what they may be up to. Since they are doing a bit of reinventing the wheel, better late than never as you said
If I find out more on the forum when v25.9 is publicly released, I'll be sure to post it, unless someone else finds out first
F
ForgottenSeer 114717
It probably is. I just don't have the willingness to confirm. Too much time and effort required.
Poor F-Secure. The German takeover is all because of a Finn who became an Avira insider at the senior executive level.
