Reply to thread

Message

<blockquote data-quote="ForgottenSeer 823865" data-source="post: 846620">Sure if you let them run... If you have a proper security strategy, they won&#039;t even be able to run in the first place, so there is no need of outbound monitoring.Why MS never bothered to create a outbound monitoring &quot;a la WFC&quot; while they made an inbound one? Because the logic behind it is that you aren&#039;t supposed to run or install untrusted stuff. And if you do, the user has to be sure it is clean or at least have a way to flag malware.And let say you have a connection monitor, 90% of the time the users will allow the outbound connection, especially if the malware has a familiar name similar to a windows process or installed program. I don&#039;t even talk about abusing a legit process to call home...It doesn&#039;t matter. A decent AV should have a default-deny component, so supposed to block any FUD keyloggers, if not it is just trash.Not saying a seriously made keyloggers&nbsp; will defeat a Firewall . So again the need outbound monitoring is limited.Security in our time requires safe habits coupled with default-deny and knowledge to how use it. Once mastered, the risks of infection become insignificant.-This is The Way -</blockquote>

[QUOTE="ForgottenSeer 823865, post: 846620"] Sure if you let them run... If you have a proper security strategy, they won't even be able to run in the first place, so there is no need of outbound monitoring. Why MS never bothered to create a outbound monitoring "a la WFC" while they made an inbound one? Because the logic behind it is that you aren't supposed to run or install untrusted stuff. And if you do, the user has to be sure it is clean or at least have a way to flag malware. And let say you have a connection monitor, 90% of the time the users will allow the outbound connection, especially if the malware has a familiar name similar to a windows process or installed program. I don't even talk about abusing a legit process to call home... It doesn't matter. A decent AV should have a default-deny component, so supposed to block any FUD keyloggers, if not it is just trash. Not saying a seriously made keyloggers will defeat a Firewall . So again the need outbound monitoring is limited. Security in our time requires safe habits coupled with default-deny and knowledge to how use it. Once mastered, the risks of infection become insignificant. -This is The Way - [/QUOTE]

Verification