Kaffee4Eck Security Config

[Kaffee4Eck]

After a long time of abstinence. Here it is my new config

Nothing special but a few tunings are made.

I use ProcessLasso cuz Windows 10 CPU managedment is hmmmmmm...

ESET Anti-Virus (Nicely new added features) low system impact and now faster scanning mechanism.

Windows Spy-Hosts since Windows 7 are blocked within Sophos UTM and just used Ports are opened for outgoing connections and a few for incoming. Used are Port-Rules, Application-Rules and IPS-Rules.

EDIT:

Primary DNS OpenDNS
Secondary DNS GoogleDNS

-- KEEP IN MIND --
Nothing is save nothing is stealth against anything

 

[Deleted member 178]

good picks :

1- Win10 Ent , do you use Applocker?
2- Sophos UTM, how you feel it?

 

[Kaffee4Eck]

1 - I will set up it in the near future. If it is needed.
2 - Sophos UTMs webproxie is tricky at the beginning but after a few optimations no more creepy webloading. Same for Port, IPS and HIPS Protection settings are tricky and horrible for beginners. But there are very handy handbooks from sophos itsself. I worked daily with Sophos UTM and set it up for companys. it is always shocking to see how many watch porns at work.

 

[Deleted member 178]

Sophos UTM is top notch, it worth the time spent on it.

 

[Kaffee4Eck]

It is more as perfect for home users. Just that should be used a standalone machine for it. I dont like virtualized Sophos UTMs.

https://www.sophos.com/de-de/medial...n/sophosutmsoftwarewebadminqsgen.pdf?la=de-DE

 

[Deleted member 178]

yes just use a spare old computer for it.

 

[Exterminator]

Nice Config!! Thanks for sharing it with us

 

[Kaffee4Eck]

Removed Emsisoft Anti-Malware
Removed Glasswire (Best features just when you pay)
Added O&O Defrag Pro 20
Added Sandboxie (Lifetime) "back again"
Added Seafile (Very nice Cloud-Service)
Added ESET Anti-Virus 10
Added Windows Firewall Control (BiniSoft) Because Windows Firewall with Sophos UTM is more as enough