Page 1 of 2 12 LastLast
Results 1 to 10 of 13
  1. #1
    Newbie
    Join Date
    May 2020
    Location
    UK
    Posts
    10

    Question Is Virus Blocker worth it over Virus Blocker Lite?

    I have Bit Defender Endpoint Security already on all my Windows devices and am just wondering if it is worth buying the Virus Blocker app to add to my Untangle Home Pro subscription and what will it give me that the Virus Blocker Lite app won't?

    As it licensed per device, can I restrict just the paid Virus Blocker app to certain devices (as to not use up all the licensed devices) for the Virus Blocker app whilst ensuring those restricted from accessing the Virus Blocker app can still access all the other apps including Virus Blocker Lite?

    In other words and in order to not use up all the licenses, restrict devices to only the paid for version of the Virus Blocker App?


    Regards: Elliott.

  2. #2
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,059

    Default

    Without calling into question the broad value of the Virus Blocker app, I would not, in your case, add the app.

  3. #3
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,111

    Default

    The malware category in Web Filter does 99.9% of the lifting already. And as Virus Blocker itself uses Bitdefender if I recall correctly... you're not adding any extra layers if you're using that on the end point...

    So no, not much value there.
    f1assistance likes this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  4. #4
    Untanglit
    Join Date
    May 2020
    Posts
    25

    Default

    As much as I read in to the Virus Blocker App - It uses ScoutIQ Cloud AV and Bitdefender Engine.

    What is ScoutIQ -> https://www.untangle.com/cloud/scout-iq/

    Virus Blocker App -> https://www.untangle.com/shop/Virus-Blocker/

    Plus it uses MIME Types - To Scan at appliance level is much better then the PC has to scan for it.

    The Firewall should always be the first line of defense!

    Best regards
    Val.
    Jim.Alles and f1assistance like this.

  5. #5
    Untangle Ninja f1assistance's Avatar
    Join Date
    Apr 2009
    Location
    Holly Springs, NC
    Posts
    1,495

    Default

    Quote Originally Posted by Valvaris View Post
    As much as I read in to the Virus Blocker App - It uses ScoutIQ Cloud AV and Bitdefender Engine.

    What is ScoutIQ -> https://www.untangle.com/cloud/scout-iq/

    Virus Blocker App -> https://www.untangle.com/shop/Virus-Blocker/

    Plus it uses MIME Types - To Scan at appliance level is much better then the PC has to scan for it.

    The Firewall should always be the first line of defense!

    Best regards
    Val.
    Wow! Welcome to the forums and dang, you took a perfect swing and hit one plumb over the bleachers and out-of-the-park!
    Clear, concise, and researched. Impressive!
    Valvaris and Jim.Alles like this.
    Vanguard Untangle...because nothing's worse than doing nothing!
    -------
    2, Pentium (R) Dual-Core CPU E5300 @ 2.60GHz 2599.968, 2089.96MB RAM
    And building #7 didn't kill itself!

  6. #6
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,059

    Default

    Quote Originally Posted by Valvaris View Post
    The Firewall should always be the first line of defense!
    Completely agreed. But let's think about the question before us:

    [I] am just wondering if it is worth buying the Virus Blocker app to add to my Untangle Home Pro subscription and what will it give me that the Virus Blocker Lite app won't?
    As I read the question, it's a practical question not a best practices question. Because as a practical question, a question about adding additional cost to the subscription, it's not as straightforward as a best practices question might be.

    There is perimeter antivirus protection in this scenario through Virus Blocker Lite. In this case, "Lite" is a little misleading since unlike all the other Untangle Lite apps, Virus Blocker Lite is intended to compliment rather than be replaced by Virus Blocker.

    Virus Blocker Lite, like Virus Blocker, uses MIME types.

    There is perimeter malware protection through Web Filter. Experience has shown that Web Filter reduces the impact of the Virus Blocker suite by being the first line of defense.

    There is, in this scenario, a concern about managing the Virus Blocker license carefully and selectively.

    So while I agree with your conclusion about perimeter defense as the best first line of defense, I personally can't make the argument, as a practical matter, that this HomePro user should invest in the $108/25 seat Virus Blocker license. I can't document a clear advantage over the tools already in place. That may be a defect in me, but just to explain my position.

    EDIT: I'm a little confused about Virus Blocker Lite and whether ScoutIQ is part of that app under the HomePro license. I don't recall there being discussion that Scout IQ is not included with Virus Blocker Lite under the HomePro license, but it is otherwise a feature of Virus Blocker Lite.
    Last edited by Sam Graf; 05-23-2020 at 06:52 AM. Reason: Amending the content
    Valvaris and f1assistance like this.

  7. #7
    Untanglit
    Join Date
    May 2020
    Posts
    25

    Default

    Hmm... strange the Virus Blocker is included with the HomePro Lic.

    Here a screenshot:
    2020-05-23_16-32-51.png

    Scout IQ is not part of Virus Blocker Lite:
    https://www.untangle.com/shop/virus-blocker-lite/

    Allot of difference on the feature list.

    Of course I myself use Virus Blocker,Webfilter,Firewall and Application Control with SSL Inspection. Works great together btw... ^^

    Sincerely
    Val.
    Last edited by Valvaris; 05-23-2020 at 07:42 AM.

  8. #8
    Untangle Ninja
    Join Date
    Feb 2016
    Posts
    1,059

    Default

    Quote Originally Posted by Valvaris View Post
    Scout IQ is not part of Virus Blocker Lite:
    https://www.untangle.com/shop/virus-blocker-lite/

    Allot of difference on the feature list.
    As I pointed out via a link to it, the Untangle demo demonstrates that ScoutIQ is in fact a feature of Virus Blocker Lite. It is a feature of my home instance of Virus Blocker Lite.

    My problem as a home user is that I'm a Home licensee. Early adopters of the Home license, long since superseded by HomePro, have a slightly different product from the HomePro product, so that introduces a little uncertainty when I'm talking about home license features.

    But that there are differences between the actual features of Virus Blocker and Virus Blocker Lite is a good sign, since they're complimentary tools. Since Virus Blocker Lite is based on the venerable Clam AV, and since Clam AV is much better known for false positives rather than false negatives, and since I exclusively use Clam AV-based scanners on all my GNU/Linux boxes, maybe I'm just overly comfortable with Clam AV.
    Valvaris and f1assistance like this.

  9. #9
    Untangle Ninja sky-knight's Avatar
    Join Date
    Apr 2008
    Location
    Phoenix, AZ
    Posts
    25,111

    Default

    The ClamAV engine also uses a bucket more RAM, so in terms of system resources per session scanned, Virus Blocker is a substantial upgrade.

    I still find WebFilter does most of the lifting in this space though.
    Sam Graf and f1assistance like this.
    Rob Sandling, BS:SWE, MCP
    NexgenAppliances.com
    Phone: 866-794-8879 x201
    Email: support@nexgenappliances.com

  10. #10
    Untangler
    Join Date
    Sep 2019
    Location
    Canada
    Posts
    39

    Default

    As I understand it (and the reason I don't bother with the Virus app) is that it can't scan https/smtps/imaps traffic unless you use the SSL Inspection app that is mentioned above. If you're one of the folks who's belief and requirements dictate the trade off issues of using SSL Inspection is not worth it, then it's also not worth using the Virus app.

    If you're running an open protocol server like FTP then yeah it makes more sense to use it.

    I'm not familiar if the virus app scans SMB that doesn't cross a subnet or other egress point the firewall controls. I'd never use this app as a replacement for an antivirus solution for local clients - particularly if you have many of them.

    As mentioned above, using some of the other Untangle apps to supplement a dedicated client side antivirus solution will help detect anomalies and patterns, specially when using SEIM products where everything all works together as more of a holistic solution.

    There's just so many things to think about with SSL Inspection when used for business - all the legal aspect and policies around it such as HIPAA, GDPR, ISO, data obfuscation, end user waivers/notifications etc.

    So for the reasons above in my personal environment, I leave the virus app off and reclaim some extra CPU cycles for other things.
    Last edited by propellherhead333; 05-23-2020 at 10:39 PM.

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2