HIPS Programs and Kerio Features

Was wondering if you thought i still needed additional programs like PG,RD,OA, even though Kerio has NIPS,HIPS, Application Behavior Blocking.My F-secure Suite also has System Control which allows me to block registry changes.Are Kerio's features good enough or would i still benefit from using additional products.I do not practise safe hex so want to be covered best i can.I've been reading the threads lately on HIPS and find them very interesting and they are why i'm questioning if my current setup is enough.Thanks.

 

Doesn't F Secure offer a FREE HIPs program..........seem to recall hearing something about that.....

 

This is what was recalled.......did not read the details....





What is F-Secure BlackLight?

F-Secure BlackLight Rootkit Elimination Technology detects objects that are hidden from users and security tools and offers the user an option to remove them. The main purpose is to fight rootkits and all kinds of malware that use rootkits. The F-Secure BlackLight Rootkit Elimination Technology works by examining the system at a deep level. This enables BlackLight to detect objects that are hidden from the user and security software.


http://www.f-secure.com/blacklight/cure.shtml

 

Hi tobacco,

Which version of the Kerio firewall are you running?

 

Kerio 4.2.2

F-secure- Application & System Control

 

i would add regdefend or other registry protection and disable kerio's Application Behavior Blocking in favor of processguard (paid) or appdefend.

 

The budget's tight for the next 2 months.Until then, would any of the free programs give me any better protection then what i have now?.

 

for free HIPS, u could try either prevx1r, antihook, cyberhawk, among others (heres a poll on free HIPS). and yes they would broaden ur protection. also check here for free registry protection.

 

Tried prevx 1 but completely locked up my system after installing.Don't know if it disagreed with F-secure or Kerio.So just un-installed it.Any thoughts on why it did this?.

 

You're not kidding. I tried Prevx1 r just recently and it would lock up probably a minute after booting. And coincidentally we are bothing using Kerio. Hmmm..

 

Hi Guys,

We have found some issues with Prevx1 and the Kerio product running alongside each other and are working to see how to resolve them. We are in contact with Sunbelt support to help try and resolve the issues.

Running multiple security products with similar functionality is going to inevitably lead to system issues. As vendors converge and the protection provided overlaps then the potential for system issues increases as low level locks and hooks compete with each other.

Thanks for bringing this to our attention.

Regards,

Prevx Support