Author Topic: About Network Shield  (Read 3544 times)

0 Members and 1 Guest are viewing this topic.

TAP

  • Guest
About Network Shield
« on: November 14, 2004, 10:05:53 PM »
According to Network Shield's descriptions.

"A new resident protection module was added to avast! 4.5: the Network Shield. It is meant as a protection against known Internet worms/attacks. It analyses all network traffic and scans it for malicious contents. It can be also taken as a lightweight firewall (or more precisely, an IDS (Intrusion Detection System))."

Does this mean that Network Shield works similar to NOD32's IMON (HTTP, FTP scanner) or similar to gateway firewall-based antivirus ?

Sorry for dumb question.

Thanks

Offline Lars-Erik

  • Avast Evangelist
  • Sr. Member
  • ***
  • Posts: 394
    • Lars-Erik Østerud
Re:About Network Shield
« Reply #1 on: November 14, 2004, 10:16:04 PM »
Aiii...  So on NT/2000/Xp systemes avast! now add TWO services that scan the data-stream to/from the net (new mail-scanner and network shield). And if one have a firwall too then there is THREE services scanning all traffic. Anyone tested how this will slow down the transfer rate?
www.osterud.name - ICQ: 7297605 - AIM/Yahoo/Facebook/Skype/Astra: LarsErikOsterud

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:About Network Shield
« Reply #2 on: November 14, 2004, 10:18:19 PM »
Not slowing down at all here. :D

techie101

  • Guest
Re:About Network Shield
« Reply #3 on: November 14, 2004, 11:12:03 PM »
Lars,

Look at it this way...
Even when users have a router firewall, and then incorporate a stand-alone firewall in the computer itself, the tranfer rate is virtually unaffected.

Does the transfer rate change?....certainly, but to the "human eye", un--noticeable.

Have fun.

Offline pk

  • Avast team
  • Super Poster
  • *
  • Posts: 2078
Re:About Network Shield
« Reply #4 on: November 14, 2004, 11:13:53 PM »
TAP: network shield NT driver loads itself after TcpIp driver, NOD uses user-mode scanning, so it's not very useful.

Lars: scanning is very fast, it uses the best scanning algorithm and there are not many signatures

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re:About Network Shield
« Reply #5 on: November 14, 2004, 11:18:52 PM »
On anything of speed <= 100 mbps the performance penalty should be negligible (unless you have very old hardware).

On gigabit/10gigabit networks it may slowi things down considerably though- but who's using these speeds to access the Internet? :P


Cheers
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1884
    • AVAST Software
Re:About Network Shield
« Reply #6 on: November 15, 2004, 03:40:30 AM »
Just want to note, that Network Shield protects you from internet worms that spread themselves via various security holes in your system. Typicaly these kind of viruses don't infect files but instead  they attack running processes on your PC (either Windows components or some server programs like SQL Server, IIS etc.). These kind of attacks are not easily catched by ordinary antivirus during file or mail scanning.

So you can hardly view it as a duplicate work.  8)

Good night.
Lukas