Advanced Plus Security Sandbox Breaker - DFIR's PC Security Config

[Sandbox Breaker - DFIR]

My day to day operations laptop.

 

[Trident]

I’ve got the Check Point Web Secure on my Chrome OS too. It’s great.

 

[Sandbox Breaker - DFIR]

You also can't accidentally run windows malware by accident. Haha

 

[Trident]

You also can't accidentally run windows malware by accident. Haha

No, that emulation + Content Disarm and Reconstruction is great. It’s a must for security and very effective. Specially when you increase the size of emulated files to 50 mb. I am looking to purchase Check Point Quantum Spark for my home. Will be soon probably.

 

[Sandbox Breaker - DFIR]

You don't need it if you have agents everywhere. I wouldn't mind a quantum spark for fun haha. Yes increased it 50mb

 

[Trident]

You don't need it if you have agents everywhere. I wouldn't mind a quantum spark for fun haha. Yes increased it 50mb

And for the IPS too
I’ve never had a chance to try their IPS.

 

[Sandbox Breaker - DFIR]

I wish like Kaspersky or SEP... They included their IPS also locally. Would be nice

 

[Trident]

I wish like Kaspersky or SEP... They included their IPS also locally. Would be nice

Kaspersky doesn’t include IPS. Their network attack blocker fends off common attempts from hackers to detect a machine like portscans but it won’t block exploits and other attempts for lateral movement the way true IPS would. It would block malicious websites system-wide and the equivalent to that is Check Point Anti-Bot. Only SEP and Norton have IPS on a OS level, everyone else uses appliances.

 

[Vitali Ortzi]

Checkpoint has incredible tech and is well tested especially in an environment with advanced state sponsored actors constantly attacking companies in the country it's based in (Israel)