Results 1 to 4 of 4

Thread: How to test?

  1. #1
    Newbie
    Join Date
    Jul 2021
    Posts
    1

    Default How to test?

    How to validate virus blocker lite is actually working? When I download EICAR test files it seems to let them through although Bitdefender is also doing its job. I can see some entries in the Scanned Web Event report but not all.

    I want to remove Bitdefender and use Windows Defender across my Windows devices.

    Does the Virus Blocker give me anything additional?

    Any thoughts?

  2. #2
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,163

    Default

    Virus Blocker Lite can only scan unencrypted transport protocols. So FTP and HTTP.

    Virus Blocker has a few more tools that let it peek into https, but both honestly don't do well without SSL Inspector deployed.

    I've often wondered why everyone gets so worked up on these two modules, why do you care? Web Filter's malware category is vastly more effective at virus control, along with Threat Prevention those are your two modules to be used to contain the spread of malware. Virus Blocker and Virus Blocker Lite have their value, but they duplicate what your endpoint AV should be doing. If you're thinking you want an additional vendor check, I suggest you use the endpoint protection that is meant for that.

    Or you can do that SSL man in the middle thing that defeats the purpose of SSL and causes endless support issues. (SSL Inspector)

    The world has moved on from this sort of scanning, use the more modern tools!
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  3. #3
    Master Untangler
    Join Date
    Jan 2010
    Posts
    108

    Default

    sky-knight...

    What are the more modern tools you are referring too..? And if the SSL Inspector and Virus Blocker Apps are so ineffective, then why are they still being included with Untangle..? What is the purpose of these apps if they don't work..?

    Just asking...

  4. #4
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    26,163

    Default

    Quote Originally Posted by BryanC1968 View Post
    sky-knight...

    What are the more modern tools you are referring too..? And if the SSL Inspector and Virus Blocker Apps are so ineffective, then why are they still being included with Untangle..? What is the purpose of these apps if they don't work..?

    Just asking...
    They do work, they just don't work as people expect them to. They have value, but not in the application you're after.

    The tools you use now are Web Filter, and Threat Prevention. They're very good at preventing access to malware laden content, and preventing that malware from accessing other things in the wild. They do this with their default configurations too, so you don't have to tell them to do it. Though I suppose you could tell them not to... but that would be silly.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2