Re: Need recommendations on security

"Mike Easter" <[email protected]> Thu, 11 May 2006 06:23:19 -0700
Newsgroups gmane.mail.spam.spamcop.geeks
Organization SpamCop
Message-ID <[email protected]>
Frog Prince wrote:
> I've a neighbor lady that has been using zone alarm (free_ and AVG
> (free) without incident for some time but is wants her system set up
> so that updates etc are done automatically.

I'm not getting the picture completely clearly.  The subject says
security.

AVG free AV .dat updates are done automatically.  ZA free personal
software 'firewall' provides outbound as well as inbound intrusion
detection.  ZoneLabs has a number of other products and suites re
viruses and spyware.  The various malwares of adware spyware have a
variety of defenses some of which involve browser choice and
configuration.

The term 'updates' can refer to anything from the .dat/s to the
upgrade/update paths of security apps.  The ZA free has numerous
'branches' of versions each with their separate update history
http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html
ZoneAlarm® Release History

... but the point I'm suggesting is that what happens automatically
isn't always enough.  The user has to continually 'touch bases' with
their security considerations and bring themselves up to speed on what
should be done 'now', the same or differently than before.  For example,
you haven't mentioned anything about the browser issue/problem and its
insecurities and what she is doing to be more secure in that
department -- in terms of which version of which browser.  The same is
true about Windows updates.  Many say she shouldn't be using IE for her
browser surfing because of its insecurities and because it is antiquated
in its functionalities and compliances.  Nothing is going to
'automatically' help with that evaluation or configuration.

If you are more security aware than she is and she trusts your
evaluation of her setup, maybe she should have you periodically check on
her system's 'status' vis such as spyware, cookie management, and update
status and needs for revisions.  That is, a human can oversee updating
and upgrading better than automation.  And automation is worthwhile too.

>  She does not mind
> paying for the software but I don;t know what to recommend.  (FWIW
> She tried Norton and McAfee and was not pleased)
>
> She's on Charter Cable broadband and has a high end HP computer and
> XP.  She also has a 15" lap top accessing via a wireless AP.

I would say there definitely needs to be a hardware switchrouter in
there.  The broad subject of wireless insecurity in such a network is a
whole 'nuther problem.  The switch router could have a logger like
WallWatcher to monitor.

> Suggestions please and I'm open to up grades and other options as may
> be appropriate.

-- 
Mike Easter
kibitzer, not SC admin