Threatshield and CroudSec do not prevent / protect from malware (AntiVirus) at ALL!

Feature
, ,
1

Hi All

It seems that both NethServer 8 and NethSecurity have lost a major feature completly:
There is no option to install any form of AntiVirus - not even ClamAV. NS7 did have a @stephdl ClamAV Module…

Threatshield and CroudSec both only block access attempts from the outside. There’s no real protection from a contaminated windows notebook / PC at all.

It seems some people are under the illusion that Threatshield and CroudSec cover all use cases, this is NOT true.
Both CroudSec and Threatshield work using block lists. Both do NO payload scanning at all.
So self distributing malware, even Ransomlockers can bypass both CroudSec and Threatshield simply by being on a USB Stick, Notebook or Share - and no detection options at all…

NethServer 8 at least can use ClamAV for mail, but there not many options for setting stuff at all.
There is no such option for the file server in NS8.

This is not a good mindset to have in network security!

I do hope this will change!

My 2 cents
Andy

2 Likes
2

Hey man why all this fervor? What’s happened? :smiley:

1 Like
3

Hi @alefattorini

Maybe just a morning frustration after answering this post…

Nothing really serious!

→ But we DO need more info for users on both sites Docs!

There are a few words in Mail about ClamAV, but otherwise AntiVirus is not mentioned…

My 2 cents
Andy

4

you are right, but saying that clamav antivirus was a community project I started, curiously this week someone was writing to me about this :confused:

3 Likes
5

This is really interesting, however this needs a lot of studies :confused:

2 Likes