Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1070507" data-attributes="member: 96560">Hardware application layer deep packet inspection firewalls have been around for a long time. It is better than normal firewalls which can only deal with ip addresses and ports. Application layer firewalls understand the underlying network protocols. This tech has traditionally been expensive ($400+ eg Dell SonicWall ) but Ubiquiti has one called EdgeRouter X that costs only $69 (they have a different business model). It does not have wifi only Ethernet, but if you live in an apartment building then that should be considered a plus. Because an attacker with a portable router can over power your router, confiigure the same wifi name, and you will automatically connect to him rather than your own router. (and then your entire network gets hacked) I think their Wifi products have the same capability but I haven&#039;t checked.Hardware firewalls also have another advantage: the attacker cannot erase the firewall&#039;s logs. So even when the attacker has gained admin control over your laptop and erased the local logs to cover his tracks, the logs on the firewall still reveals his presence.That is not to say that Windows based firewalls are useless, they have their place. They can have rules for each application - which a hardware firewall cannot have. And they can have a Outbound default deny policy, where only known good specified apps can connect outbound. But that can be overcome.Anyways, no technical security layer is ever 100% secure. All a defender can do is put in layers of it and hopefully stop the attacker at some layer. Good security requires monitoring and thus time and effort.</blockquote>

[QUOTE="Victor M, post: 1070507, member: 96560"] Hardware application layer deep packet inspection firewalls have been around for a long time. It is better than normal firewalls which can only deal with ip addresses and ports. Application layer firewalls understand the underlying network protocols. This tech has traditionally been expensive ($400+ eg Dell SonicWall ) but Ubiquiti has one called EdgeRouter X that costs only $69 (they have a different business model). It does not have wifi only Ethernet, but if you live in an apartment building then that should be considered a plus. Because an attacker with a portable router can over power your router, confiigure the same wifi name, and you will automatically connect to him rather than your own router. (and then your entire network gets hacked) I think their Wifi products have the same capability but I haven't checked. Hardware firewalls also have another advantage: the attacker cannot erase the firewall's logs. So even when the attacker has gained admin control over your laptop and erased the local logs to cover his tracks, the logs on the firewall still reveals his presence. That is not to say that Windows based firewalls are useless, they have their place. They can have rules for each application - which a hardware firewall cannot have. And they can have a Outbound default deny policy, where only known good specified apps can connect outbound. But that can be overcome. Anyways, no technical security layer is ever 100% secure. All a defender can do is put in layers of it and hopefully stop the attacker at some layer. Good security requires monitoring and thus time and effort. [/QUOTE]

Verification