I am much impressed w/ LnS software AND support

This program has much potential and the support was fantastic.

Take note that I have not purchased this software yet. I have been running it only for a few days. YET, despite my new introduction to it, the author of this program reviewed *.dmp files from my PC after crash. (which, incidentally, was because I was doing some strange things with the software) And, Phant0m generously answered many of my initial questions to get me going quick.

The fact that Frederic would do that for someone who has not even purchased the program is amazing. I had problems with ZA that I had to resolve on my own after 3 months investigation. I called their offices, but they have no no phone support. Their online support is pathetic, and their technical expertise was horrendous.

Five star support here for LnS -

Will I buy it? I need more time - I'm SOLD on the support!

Currently, I am evaluating the product strenuously. I am familiar with firewalls and TCP/IP, and I really want to make sure that this program holds up to outbound spyware and inbound attacks and hacks. So far, it looks really good -

A few potential suggestions:

(1) I run dual-nics reaching separate networks. Running two instances of LnS works, but it would be a bit cleaner to integrate it into one.

(2) A finer granularity of app control would be nice. I want my mail client, for instance, to reach only one destination IP. That way, if I open an HTML email, it does not download any images or make any connections. (which can be used for tracking)

(3) Perhaps this is already there, but I would like to know that there is app level control that prevents spyware and trojan impersonation. If a program is going to run, LnS should be able to confirm that it IS, in fact, the program and not an imposter. If you can't do this, your outbound rules will not help.

I'll keep posting ideas as I use the program!

Incidentally, can someone suggest a good log analyzer for LnS? I was using VisualZone for ZA.

 

Hi cqc10,

I'm sure Frédéric will take your suggestions into account! I believe as you do that the support tells everything about the software itself. I have to give Frédéric the five star support as well.

Now, to your questions:

Number 1 I think Frédéric has to answer, even though I think that your case is quite special. Not all people have two NIC's and running two processes of Look'n'Stop at the same time does work very well.

Number 2 and 3 (DLL Detection) is answered here:

http://www.wilderssecurity.com/showthread.php?t=9604

Hope that helps you out so far!

Best regards,

Patrice