Sitecom Cloud Security - Hitman Pro in the Router

What is the status of Sitecom with HitmanPro UTM?

I'm think about buying one Sitecom X8 to put after ISP Router, but don't know if this is really a great option.

 

https://sitecom.com/

Note that there are no US resellers at this time.

 

What I want to know is some news about this partnership...

Sitecom seems to be quiet last year...

 

Based on https://www.asus.com/support/faq/1012070/ , it says that there is DPI engine. Is it possible that DPI engine is in Trend Micro Server? And the router does sth like VPN to the server? Else, like Asus AC88U, the processor(Broadcom BCM47094 1.4GHz dual core) it has is way faster than the one in Sitecom X6(Ralink RT6856 700MHz) and way more RAM(512vs64MB), so is it possible to achieve way faster than Sitecom's WAN-LAN throughput speed? What if TM make it a little more efficient as well?

 

My guess is that ASUS scans on board the router, therefore needs a bigger CPU, Sitecom does scan in the cloud, only the first bits of the file and therefore does not need all that CPU.
WAN-LAN speed on the older model X6 is 130Mbit with the UTM feature enabled.
The X8 should be at least that fast.

I run this one:

https://www.sitecom.com/en/wireless-gigabit-vpn-router-n300/wlr-4002b/p/1507

on a 100Mbit connection with at least 20 devices connected, works like a charm. This router and the older X6 have similar hardware.
Hope this helps

/E

 

I thought Sitecom router perform Deep Packet Inspection on board the router as same as Asus, and both use online database to check. From what I saw in page 6.

 

What you need to know about the UTM feature:

http://www.surfright.nl/en/hitmanpro/utm

/E

 

The link http://www.surfright.nl/en/hitmanpro/utm clearly explains the benefit of IntRapidScan versus Stream-based scanning.

The IntRapidScan is only using a fingerprint of the first packets of data receive, while traditional stream solution uses the full data to scan

This raises the question, when a few packets are sufficient to determine whether a data stream is malware or goodware, WHY WOULD OTHER UTM SOLUTIONS KEEP USING FULL DATA SCANNING?

I remember a hilareous interview of Luis van Gaal who asked a journalist whether he was so clever or the the journalist so stupid, so ....

Is Surfright so smart or are Sophos/Symantec/Trend/Fortinet/Kapersky/etc so dumb?

 

Isn't it similar to Trend Micro in Asus? Can u list functions that Asus does not have? So it will help me decide which to buy. Asus TM info is here: https://www.asus.com/support/faq/1012070/

 

Read back on page 6 and you will get some more info regarding your question.

/E

 

That's why I'm asking. Hitman will probably defend their products from another product so does Asus. From http://ec2-54-202-251-7.us-west-2.compute.amazonaws.com:8080/AiProtection_HomeProtection.asp , it's not exactly the same as page 6 anymore. For vulnerable exploits, now TM uses their Trend Micro Virtual Patching which I believe it is not the same one as that Developer said anymore. Asus also has botnet preventing(which might not be as effective as Hitman) and DPI engine from what I read in https://www.asus.com/support/faq/1012070/ . And if it does DPI, it probably function almost the same as DPI engine in this site: http://la.trendmicro.com/media/wp/deep-security-whitepaper-en.pdf . I don't really care about privacy as long as information only go to Trend Micro. So I'm asking for whether or not Hitman tried to defend their products or Trend Micro Asus exaggerates.

 

I did not read what Mark said as some kind of defense of their solution, just a very detailed explanation.
I did not try Asus solution so I do not know if they exaggerates.

/E

 

I would say probably both... what you should ask yourself is... They both can provide a solid protection.

But which one of the two is fully maintained and developed to ensure that your investiment goes with a solution that is constantly improved and supported. I can't speak from SITECOM but ASUS (for which I own a router with the TM engine) has a strong record on firmware updates and security improvements. Their firmware has been updated very often, the developer are very reactive to users requests and feedback and TM engine went into variouos revisions and updates. I don't know for SITECOM, up to you to investigate

 

So you have tried Sitecom? I think the main point that is important is the Deep Packet Inspection. If Asus does perform real Deep Packet Inspection which covers malware and intrusion detection, then I think Asus would be a better choice as there won't be yearly fee and Asus routers outperform other routers in networking.

 

I agree, I think Asus provide quite a bit of firmware updates frequently, and update TM engine as well. The latest firmware for Sitecom's newest router, X8, was updated ten months ago: http://www.sitecomlearningcentre.com/products/wlr-8100v1002/wi-fi-router-x8-ac1750/downloads . However, may be Sitecom's engine is already stable, and it uses Cloud database to update signatures. But if Asus Router does not perform real DPI then it's nothing compared to Sitecom.

 

@ Mark and/or Erik
As I understand only http traffic over port 80 is scanned today, will/can it be possible to scan https in the future?
Or is it just overkill doing so?
More an more sites are using it, therefor my question.

PS! I just read the deal with Sophos, will your UTM still be availble as a standalone product?

/E

 

Just heard from Sitecom this week that they are discontinuing the SCS (Sitecom Cloud Security) in the near future.
Can Mark or Erik tell us if their UTM feature will be available somewhere else?
Or did this feature become the new Sophos "Sandstorm" in the SG UTM Firewall series?

/E

 

Thanks Esse for letting us know.

@erikloman and/or @markloman could you tell us a bit more about this?

 

@erikloman and @markloman :
I had the hope, that UTM will make it into Fritz!Box,
but since Surfright was bought by Sophos, my hope has gone...

Will UTM survive?

 

Any link for this?

 

Yes and No, I had an support ticket for one of my costumers, with an issue they could not replicate (downloading larger files).
I have had this same issue at a couple of installs, and never got an answer from support, not until now.
Maybe they got tired of me reporting the same issues every time , and gave this answer?
They also said that any customer who has purchased a subscription for this service will be contacted.
I do not not want to link to a costumer related issue, I am sure you understand.

/E