Firewall Component

Product Discussions XCS - Xcitium Client Security
1

Hi All,

I am interested to hear your perspectives on the utilization of the firewall component in our community. If you are using it, could you please share your experiences so far? Alternatively, if you have chosen not to use it, could you shed light on your reasons? Thank you in advance.

2

image
FLS Malicious

3

I don’t use the firewall component extensively, as a hardware firewall is also at the net gate to help block intrusion. However, I add several rules to block specified applications from connecting to the internet. Especially a bulk of applications secretly download files from the internet, as well as collect and send out telemetry data.

Personally, I hope the firewall component can provide an option to block the containment application from connecting to any address.

2 Likes
4

@Redstraw do you submit unknown files to Xcitium for analysis?

5

@Nik I don’t do that often. I don’t have extra time to test malware samples or unknown softwares.

1 Like
6

i love to submit files to Xcitium for analysis all of them are bad by Xcitium

7

Great work to help improve the FLS :+1:
We all will benefit from your effects.

1 Like
8

i also submit files to Verdict Cloud and also gets bad all of them by Xcitium

image
image992Ă—331 26.3 KB

1 Like
9

image
image998Ă—335 25.3 KB

This file is clean by Xcitium

10

@Redstraw did you use CAMAS in the past?

11

Yes, the hardware firewall provides protection at the network level but not at the endpoint level.

“Personally, I hope the firewall component can provide an option to block the containment application from connecting to any address.” This is done if I’m not mistaken.

12

I haven’t used that yet.

13

I haven’t found the option, can you give any detail?

14

I thought there was something there but you maybe able to block containment items from accessing the network under the containment module. Maybe someone from Xcitium team can chime in.