Mamutu Configuration

Tossing Mamutu on my gaming laptop yet again. For some reason I keep finding myself switching between Mamutu and LnS/Some AV combo. With that being said it brings me to my next question.

Is a firewall necessary with Mamutu? Secondly is an AV necessary?

Lastly anyone have any tips on hardening Mamutu for the best security while maintaining flexibility and reducing system overhead as this is a gaming laptop?

 

I would recommend that you at least use an AV beside Mamutu. Mamutu has no signature scan so it won't recognize malware that is on your PC that isn't active yet.
And it is not the holy greil either. So it is possible that it will miss malware, too. There is no perfect solution.

@FW:
It depends on how you like it. If you already have a LnS license why don't you want to use it. LnS is very lightweight.
Mamutu doesn't need a lot of your ressources and just adds an additional layer of protection, so AV+FW+BB is imho the best security solution causing very few problems compared to AV+FW+HIPS.

I'm using ESET NOD32 + Windows 7 FW with outbound control turned on and Mamutu and I don't feel any impact.
Try to run 3DMark with Mamutu on/off and you wont see any difference.

 

good advise

 

Likewise. I wouldn't use just mamutu alone. There is a reason its integrated with EAM. If you have LNS, just add mamutu and avast. Avast's Behavior shouldn't interfere with mamutu. That actually sounds like a nice and light combo. Hmmmm....Might be something to try.

 

No point in using LnS with Windows 7 FW.

 

Sorry dragon didn't notice that.

 

How about OA Premium and Mamutu together or is too much?
HIPS & BB, would there be a conflict or would something need to excluded?

 

There is no conflict between OA and Mamutu. In fact, Emsisoft recommends this combination, or rather, they recommend using EAM (which includes Mamutu) together with OA. They work perfectly together.

 

Mamutu and F-secure IS bad or good combination?What do you think?To put Mamutu with F-secure or not.

 

I would say: Mamutu and Online Armor++. Perfect combination IMHO.

 

Mamutu's behavior blocker seems to cause FireFox to lock up a fair bit, is there anyway to reduce this or eliminate it completely?

 

I know you can check for beta updates, but how stable are they? Do they implement the beta updates after a zero day exploit or one of many MRG Flash Tests?

 

This thread isnt about whats compatible and whats not. Its about the actual configuration.

 

They advise it, but Mamutu overlaps with the HIPS of OA. Mamutu is more of a HIPS like (I forgot the name)the Israeli HIPS which never came out of Beta. It sorts of gives points to intrusions, when enough suspicion points are acquired, it pops up a warning, which may be surpressed by community voting

When you use intelligent false positive reduction, it also combines the sorts of intrusions against known patterns (this is where ThreatFire and AVG ID protection are based on solely). When you acquire enough intrusion points which do not match a behavior patern, then intelligent false positives reduction surpresses it (or the max points sensitivity border is shifted up, I don't know).

So Mamutu looks more like an intelligent HIPS with behavioral features and community voting than a strict behavioral blocker. This is not bad, it is problably the reason why it is more solid than AVG ID protection and ThreatFire.

When A2 is able to combine the excellent pop-ups of OA with the intelligence of Mamuto (together with whitelist of OA and community voting of Mamutu), I think they will have a very strong product (classical HIPS robustness with modern technology to surpress a lot of false positives). It would be greater when they combine community voting with malware analyses of A2 and Ikarus engines. But off course one can also buy PrevX4, which will bring most of these features in 2011. In regard to PrevX I stand corrected. When PrevX2 came out I found to much of mixed bag with all the defense mechanismes providing no synergy. PrevX3 was a real breakthrough in combining these features to provide HIPS like security with AV like user hassle. Next came PrevX Safe Online. PrevX4 will problably combine all that (firewall, more granular heuristics control, regrun like remote help post infection clean up script features, the AV-blacklist and community whitelist). PrevX have been working on it for a long time (see https://www.wilderssecurity.com/showpost.php?p=1351503&postcount=558 ).

Regards Kees

 

You can choose paranoid mode but I run it with standard settings, it is enough for my needs. If you want to be sure you can go paranoid mode, it wont drag down your system more, it just will give you more popups.

It isn't a standalone solution, just add it as an additional layer of security.
As I said above you should use a FW and AV beside Mamutu.

 

Personally just set it up on Paranoid, and disable community reduction alerts, even with this, after the first few times you have used all your daily programs, Mamutu will probably be as quiet as not having ANYTHING installed.

 

It is.