What is your current security setup?

[Happy-Dude]

Heya guys!!

I was just wondering what security members use. It's interesting to compare the software/hardware differences. Also, there is a great thought process behind the selection of them.

**Note: Planning to add Haute Secure for actual site blocking (different from WOT rating and SiteAdvisor suggestions)

Mine is:
Antivirus- Avast! Home Edition
Firewall- Comodo Firewall Pro
Router Firewall-Westell VersaLink 7500 Built-In Firewall Active
Antispyware- Resident: Windows Defender
Antispyware- On Demand: Spybot S&D [with Immunize feature on and, I think, TeaTimer off]+Spyware Terminator+AVG Antispyware Free
Active HIPS- Winpatrol+ThreatFire
Browser Protection- SpywareBlaster
Browsers- Internet Explorer 7+Mozilla Firefox 2
BROWSER ADD-ONS:
IE7: IE7PRO+MCAFEE SITEADVISOR+WOT
MF2: NOSCRIPT+DR.WEB ANTI-VIRUS LINK CHECKER+WOT+MCAFEE SITEADVISOR+DOWNLOAD STATUSBAR
Operating System- Windows Service Pack 3 [with all updates installed]
On-Demand Activity- Once every month
Note: For a great security setup, customizing the programs are absolutly needed (I customized the Windows XP interface, IE7 and MF2 for optimized security) and constant updates should be active and monitored.

The reasons for this setup:
-All programs have a simple interface.
-All programs can be customized easily.
-All programs have great protection.
-All programs have easy updating and update well.
-All programs have been recommended.
-Most programs have dedicated fourms, which means the company is trying to make quality products.
-All programs have great overall rating and reputations.
-All programs have simple and easy intergration with the Windows XP OS.
-On Demand activity is easy and simple.

Overall, the physical memory usage of the active protection is about 312 MB of 768 MB (without browsers open). With a single browser, it usually jumps to about 350 MB, and with both browsers open, it jumps to about 400 MB. Not bad, considering the active protection doesn't consume much resources.

P.S-
Also, some other programs I recommend that are not necessarily security related, but help in many OS areas and better than many other programs, are:
-Trillian Messenger Client
-Pidgin
-Wise Registry Cleaner
-CCleaner
-WeatherPulse
-7-Zip
-Auslogics Registry Defrag
-JK Defrag
-REAL ALTERNATIVE
-VLC Media Player
-PROCESS EXPLORER
-SIW SYSTEM INFORMATION UTLITY
-CPU-Z

[TJB]

Well, that is quite a list Happy-Dude.

Whenever people ask me about different security software, it varies depending on the person that is asking. If it is someone not so computer savvy, I will suggest Kaspersky or ZoneAlarm because they cover wider areas of security so the user only has to work with and learn that one tool. For someone with basic knowledge of computers or more, I'd recommend AVG, Ad-aware, Spybot S&D, and Spyware Blaster because they could probably handle managing a few programs at once easily.

In my opinion, someone that is into security really has little need for security tools. We know what causes viruses, that popups usually install malicious code via ActiveX when clicked on, and that we should not open e-mail attachments from people we do not know.

All I need is Firefox :)
Haven't had any problems for a couple years now.

[hackyhaha]

you forgot 1: mvps hostfile

grts

[Matrix]

do you use all this "sorry but i think it doesn't need a matter!"
i'm not sure that you need all this man, do you work for Pentagon or CIA ? :))
Nod32 the last version with Zone alarm or personal firewall are fine.

[The_NeTpSyChO]

My security setup is easy :
somes iptables rules, SELinux, kernel patch like grsecurity & rkhunter.

[binish]

running apm on chroot environment with iptables and portsentry =)

[Terminator]

I think Norton Endpoint protection is very good , Mcafee enterprise Antivirus/antispyware is very good 2. As for the firewall , windows firewall is good enough at regular times , but if you're getting naughty you'll have to use a more advanced one. Outpost firewall pro is an excellent one. I use it on demand when I'm on one of my 'Adventurous projects'.

[Happy-Dude]

Say, how's Norton been doing these years? (After the 2002-03 flops, people have been staying far away. Now, after seeing some new test results and commitments, things might change ...)

[omen]

man thats a lot. i have a simpel nat router with UPnP disable and remote manement also disable of the ext interface. f
zonealarm on my laptop and for ma inportant files truecrypt:)

[CyberGhost]

Paranoia... Don't connect computer into Net.

[Happy-Dude]

lol !! Best way, after all ;) .

[ManFromDelMunky]

Err, Cisco ASA 5505, ISA 2006 and the Windows FW. Desktop OS varies depending on mood and tool set. Biometic auth using an HP NC6400 built in stuff(not sure how safe this is but am a bit lazy) PGP and EFS (not moved to Vista yet) for enc. AV i use Trend but dont have much call to use it, if some one wants in (and they have the resourses) then its game over realy. I do patch everything i have and if there is the option i do it hourly. Oh and I occasionally run wireshark and root kit revealer just to see what my system is actually up to.

[regret]

I can't list everything I've got in line here....but here's a little tidbit for you linux users out there in fear of your system's security, but you never really check your log files.

Make a script in your root directory called 'quicksec' (without the quotations), and enter this script.

#!/bin/bash

echo
echo "Last snort alert"
echo "----------------"
tail -n 8 /var/log/snort/alert
echo

echo "Login info"
echo "----------"
last -10
echo

echo "Security log"
echo "------------"
tail /var/log/secure
echo

Then modify the .bashrc file for your root account and add the quicksec script in the list.

Now everytime you su -, or log in as root, you will get a quick snapshot of your system. (The logs shown here are an example, my quicksec file is 38 lines long for the things I watch across my network, but as with everything in linux...it is fully customizable to the needs of your system).

**Thanks to Dual and Bland for that little tip from years back**