NVT EXE Pro 4 vs VoodooShield vs AppGuard
- Thread starter security.paranoid
- Start date
- Aug 4, 2016
- 1,465
I bought VoodooShield three months ago or so, due to a issue they had I ended up uninstalling & reinstalling, anyway I was blocked, I contacted the developer who said I will give you a couple more seats (not really) Not my fault - Well if you ever image back I did once I was again blocked - The annoying thing was the issue was caused by themselves with an bad update, not used it since, might contact the developer, who can’t seem to see what PC's it's been installed on. Just want the original seat?
Not expensive for SEPC, which is Symantec's SaaS offering. Light as a feather.
Endpoint Protection Cloud | Symantec
AV-TEST – The Independent IT-Security Institute
SEPC is their premier offering, check the whitepaper.
https://www.symantec.com/content/dam/symantec/docs/data-sheets/endpoint-protection-cloud-en.pdf
Advanced Machine Learning
Behavior Monitoring
Memory Exploit Mitigation
Emulator
Firewall and Intrusion Prevention
File Reputation
Antivirus
Device Control
A powerful combination of detection technologies stop
advanced threats and rapidly-mutating malware regardless
of how they attack your endpoint – all in a high-performance,
lightweight agent.
• Advanced machine learning blocks new and emerging
threats using trillions of samples of good and bad files
in the Symantec Global Intelligence Network to power
machine-learning results.
• Behavior monitoring determines file risk by monitoring
nearly 1,400 file behaviors while they execute in real time
to block malicious files.
• Memory exploit mitigation neutralizes zero-day exploits in
popular software that has not been patched by the vendor
using signatureless technology that works regardless of flaw,
bug, or vulnerability.
• High-speed emulation technology detects malware hidden
by polymorphic custom packers. A static data scanner runs
each file in milliseconds, in a lightweight virtual machine to
force threats to reveal themselves, improving both detection
rates and performance.
Endpoint Protection Cloud | Symantec
AV-TEST – The Independent IT-Security Institute
SEPC is their premier offering, check the whitepaper.
https://www.symantec.com/content/dam/symantec/docs/data-sheets/endpoint-protection-cloud-en.pdf
Advanced Machine Learning
Behavior Monitoring
Memory Exploit Mitigation
Emulator
Firewall and Intrusion Prevention
File Reputation
Antivirus
Device Control
A powerful combination of detection technologies stop
advanced threats and rapidly-mutating malware regardless
of how they attack your endpoint – all in a high-performance,
lightweight agent.
• Advanced machine learning blocks new and emerging
threats using trillions of samples of good and bad files
in the Symantec Global Intelligence Network to power
machine-learning results.
• Behavior monitoring determines file risk by monitoring
nearly 1,400 file behaviors while they execute in real time
to block malicious files.
• Memory exploit mitigation neutralizes zero-day exploits in
popular software that has not been patched by the vendor
using signatureless technology that works regardless of flaw,
bug, or vulnerability.
• High-speed emulation technology detects malware hidden
by polymorphic custom packers. A static data scanner runs
each file in milliseconds, in a lightweight virtual machine to
force threats to reveal themselves, improving both detection
rates and performance.
- Nov 7, 2016
- 468
Sonar function-
SONAR is real-time protection that detects potentially malicious applications when they run. It provides "zero-day" protection because it detects threats before traditional virus and spyware detection definitions have been created to address the threats.
Source - Turn SONAR Protection off or on
Appguard = just block executable/dll/drivers based on the policy you made.
ERP (and most anti-exe) = give you the choice to allow or block the executable; however it doesn't monitor dlls and drivers.
so Appguard block more stuff but need more work from the user.
ERP (and most anti-exe) = give you the choice to allow or block the executable; however it doesn't monitor dlls and drivers.
so Appguard block more stuff but need more work from the user.
- Dec 23, 2014
- 8,599
SONAR 4 = Advanced Heuristics + Behavior Blocker (based on behavioral profiles). It has an interesting feature: Non Process Threats (NPTs), that helps to protect against code injections.
"SONAR does not make detections on application type, but on how a process behaves. SONAR acts on an application only if that application behaves maliciously, regardless of its type. For example, if a Trojan horse or keylogger does not act maliciously, SONAR does not detect it."
.
About SONAR
"SONAR does not make detections on application type, but on how a process behaves. SONAR acts on an application only if that application behaves maliciously, regardless of its type. For example, if a Trojan horse or keylogger does not act maliciously, SONAR does not detect it."
.
About SONAR
- Jul 3, 2015
- 8,153
Thanks.
So I don't think it replaces default/deny software. It is behavior based, so it is very likely to fail when a new type of malware behavior takes place.
- Aug 17, 2013
- 1,905
It's basically just a BB and, no it doesn't replace default deny.
- Aug 17, 2013
- 1,905
- Jun 24, 2016
- 2,487
SONAR has behaved amazing against Kaspersky Behaviour Blocker and I might say its AI even behaved better. Still, Kaspersky has some amazing extra modules like you mentioned, TAM; Application Control; which complement their BB in a way Norton cannot reach. This is why, I think, Kaspersky offer a more solid product for end-users :=)
- Aug 17, 2013
- 1,905
Yeah, Kaspersky seem to be one of the very few vendors that pay full attention to every module they offer.
Dont mistaken Symantec EP with Norton IS, both have sonar, but SEP has a kind of SRP called "Application and Device Control" and not saying a very potent Firewall.
- Aug 17, 2013
- 1,905
If we're comparing endpoint protection it's only fair to compare each company's (Business/endpoint protection) I'm just trailing SEP.
I did a short writeup of Norton/Symantec differences. I REALLY like their corporate offerings, but have some issues with their consumer stuff. Also I love the fact that their corporate stuff uses 100% 443/HTTPS while the consumer one doesn't. Symantec really does seem to spend a lot of time on their corporate stuff, moreso than their consumer.
Norton/Symantec Versions Explained.
Norton/Symantec Versions Explained.
Consumers (aka Home users) doesn't bring money, they just want stuff for free that does everything automatically for them.
No wonder more and more vendors get away from consumers and focuses on businesses/corporations.
No wonder more and more vendors get away from consumers and focuses on businesses/corporations.
and when businesses contact the support, it is one IT guy for hundreds of machines...whose has at least some decent understanding of Windows.
the same for linux fo example red hat standard support "est une arnaque" !
Similar threads
