

You can set the firewall to
one of three types of security settings: minimum, medium and maximum security.
Minimum
security allows all communications with your computer to occur except for
specifically defined restrictions. This is the least amount of security you can
have with the firewall. When switched to
Medium security the INVISUS®
Desktop Firewall restricts all Internet and network activity unless you give
the firewall permission or have a filter rule in place. If an unknown program
tries to connect with your computer, a Connection Alert will appear, and
depending on the user's answer, the communication will be denied, permitted
temporarily or permitted always. The
Maximum security setting
blocks all communication to and from the computer that does not match existing
filter rules.

The INVISUS® Desktop
Firewall blocks or filters all
incoming connections to your
computer from the Internet and other computers inside a network. The firewall
also blocks and filters all outgoing
connections to your computer. Trojan horse applications and many other hacker
tools work by infecting a computer via authorized programs such as email, and
then connecting out from the victim's computer completely undetected.
Bi-directional filtering is critical to stopping these types of hacker attacks
and other threats -- such as Denial of Service attacks where your computer is
used to attack someone else without your knowledge.

Stateful inspection is the
firewall's ability to act as a
checkpoint for every program
and application that tries to connect in our out of your computer. No
unauthorized programs or activities can get in our out of your PC because they
will first be checked against the firewall's filter rules. The firewall
immediately decides whether or not the attempted action is permitted. Hackers
cannot use unauthorized channels or programs for their mischief.

The firewall automatically
drops unauthorized connections to your PC, and pops up a
connection alert
window warning you of the failed attempt to connect to your system. Each
connection alert is a built-in intrusion detection system that tells you the IP
address and description of the intruder that you can use to stay aware of who
or what is attempting to access your computer without your permission.

With the INVISUS® Desktop
Firewall, you can track
every attempted connection to
your computer with several levels of detail. The firewall log tracks specific
details including the IP Address of the unauthorized intrusion so you can find
out who is trying to access your PC without your permission.

In order for the firewall to
be able to identify authorized applications correctly, an
encrypted signature (MD5)
is issued to each authorized application when a filter rule is created. The
approved application then uses this signature while trying to initiate any
communication in or out of the computer. As this signature is always unique, it
will prevent any Trojan horse application's attempt to disguise itself as a
trusted application. In essence, the firewall establishes very specific
security policies for your PC.
Return to
Technology
main page
|