I went away from Consumer-Grade Malware Protection since allot of these products have features that just bloat the PC or are a total waste of space.
I can recommend a nice network Layer protections beginning with something that is easy to setup:
- Ubiquity UDM-Pro (Firewall, Router, Switch, IDS/IPS, Port-Scanner and Geo-Block) (IDS/IPS uses ET-Signatures)
Cybersecurity Solutions, Services & Training | Proofpoint <- Signatures
- Then Network Segmentation restricting traffic from and to devices plus the internet
- After all that Windows Firewall Default Deny Policy for Incoming and Outgoing Traffic for that I use F-Secure since the Firewall Logs are nice to understand.
- Anti-Malware Product in use F-Secure EPP Computer Protection - True Anti-Malware without the bloat of 100 other things that should be optional or not needed.
I criticize all the AV-Vendors since they try to cover a huge feature set and nag afterwards if some features are disabled or do not even work properly.
This is a Advanced Setup for Advanced-Home-Users or IT-Admins. it is not as easy as Plugging in a Router and just setup and forget. Ubiquiti makes it easier to Administer but you still need some knowledge how to set some things up properly or you could have some dire consequences.
Overview:
- Ubiquiti UDM-Pro
- DNS Cloudflare Free Resolver with Anti-Malware 1.1.1.2 and 1.0.0.2
- Cable Modem in Bridge-Mode
- Ubiquiti AP-AC-PRO WiFi
- F-Secure EPP Computer Protection
Browser Extensions:
- Ublock Origin
- F-Secure browsing protection for F-Secure EPP Computer Protection Web-Security Engine without disrupting SSL Certificates
Alternatives to Ubiquiti could be open-hardware/software Firewalls:
- Hunsun / Works with OPNsense / PFsense / Mikrotik / Untangle / Sophos SG and XG Home Edition
- Netgate / PFsense
- Deciso / opnsense
The problem with all that is how much thruput you have with given hardware and how far you can push it. I chose Ubiquiti because of the 3,5 Gbit/s thruput with IDS/IPS enabled. And so much more...
Sincerely
Val.