Enhanced security integrated firewall (ESS) New Version Test

ESS (ESET Smart Security) is a high-end Security protection software under the European ESET NOD32. It is small in size, fast in scanning, and has complete protection functions, many advantages such as low resource occupation have been favored by the majority of network users. It is the only anti-virus software in the world that has passed 46 VB100 % tests. It is hailed as "gold anti-virus ". Not long ago, ESS launched the latest version of 3.0. The new version made major changes to the software interface and added functions such as the integrated firewall. Next we will enter our evaluation time, let's take a look at the new version of ESS to bring us a new experience. Test Platform:

Hardware environment
CPU	Intel 740
Motherboard	Intel 915PM
Memory	512 mb ddr 533*2
Sound Card	5.1 integrated sound card
Graphics card	ATI Mobility Radeon X600 (RV380)
Hard Disk	120 GB 7200 to SATA hard drive
Software Environment
Operating System	Windows XP SP2

Software Information:

ESET Smart Security
Software Version	3.0.645
Software size	21.1 MB
Software Language	Simplified Chinese
Software category	Network protection tools
Authorization Method	Shared Software
Applicable Environment	Windows XP, 2003, and Vista

Software InstallationFigure 1. Software Interface 2. Network Protection Mode High-speed anti-virus Performance

After the software is installed, it can run normally without restarting. The update will be automatically executed immediately and the latest virus feature library and software update program will be downloaded. The new version of NOD32 has been greatly changed from the interface. The NOD32 interface of version 2.7 is very simple and has special features compared with the MSN friends list, while the new version of NOD32 of version 3.0 has many features, there is a lot of atmosphere in the interface design, and the color tone and functional buttons are much better than the old version, and they are no longer so monotonous.

Figure 3. Software Interface

NOD32 has always been famous for its high-speed and accurate anti-virus technology. What about the performance of the new version. In just over a dozen seconds, ESS has accurately identified more than 3000 virus files, and is more satisfied with the results of the full scan. After in-depth analysis and inspection of the entire computer, it took only 53 minutes to scan the GB hard disk. During the scanning process, the computer runs other software very smoothly, and the anti-virus software occupies very low system resources.

Figure 4. scan results

Figure 5 scan options

　　Personal Firewall Function

The biggest highlight of the new NOD32 ESS version is the integration of individual firewall functions. The firewall is a unique part of Ess and also the focus of attention. Ess firewall has three working modes: automatic mode, interactive mode, and policy-based mode. Automatic mode: the firewall automatically processes network communication requests and works in background mode. Interactive Mode: The application communication window will pop up, and Ess will ask you whether to allow or reject the communication. Rule mode: You can create rules, and the application runs as scheduled.

Figure 6. Personal Firewall

After checking, I found that the integrated personal firewall in the new NOD32 version is not the kerio style and core circulating on the Internet. This firewall includes automatic rule filtering and application rule permission creation. You can edit the trusted area. Firewall manual filtering is suitable for users who are familiar with computer and personal firewall settings. It can be understood as policy-based Management. Traffic conforming to the policy is executed according to the behavior defined by the policy, which is not included in the policy, will ask the user how to operate. However, the firewall cannot be disabled separately. You can only select allow all. However, after the firewall is enabled, the system speed slows down significantly, and the setting of rules is very complicated. When sending and receiving emails, the attachment download speed is normal, but it is slow during uploading.Anti-virus and anti-spyware Functions

The current status of the software is very clear, and the description dialog box provides very accurate data and information. The software provides three modules: anti-virus and anti-spyware protection, personal firewall, and anti-spam. after entering the global advanced settings, the setting options are refined, multiple settings are provided for you to configure NOD32, which is more detailed and complete than version 2.7. In the dialog box before the interface, all completed tasks and upcoming work plan tasks are listed, so that you can grasp the data in the first place.

Figure 7. Protection Status

　　Efficient software setup system

NOD32 ESS's security protection is very positive and fast. Every moment, we are experiencing various security attacks spread through the network, which may cause catastrophic consequences if we don't care about it. Therefore, most antivirus software that relies on Signature Updates cannot respond immediately. The advanced ThreatSense Technology of NOD32 provides higher computer security. Threatsense usually only ranges from 20 KB to 50 kb each time it is updated. Therefore, NOD32 can better save system resources. ThreatSense technology, it can effectively detect unknown viruses. NOD32 detects the latest variant virus without updating the virus database, and successfully blocks the spread of the virus.

Figure 8. engine parameter settingsIDS advanced options

IDS stands for the intrusion detection system ". Professionally, it monitors the running status of networks and systems according to certain security policies, and tries its best to discover various attack attempts, attack behaviors, or attack results, to ensure the confidentiality, integrity and availability of network system resources. Unlike professional firewalls, the NOD32 ess ids intrusion detection system is a monitoring device that does not cross any link and can work without network traffic flowing through it. ESS's firewall and IDS can be operated separately. IDS is a monitoring system and can be selected or meet your needs. For example, if you find that the rules or monitoring are not complete, you can change the settings and rules, or reset it.

Figure 9. IDS Advanced Settings

　　Network protocol filtering

ESS provides the protocol filtering function. ESS Personal Firewall supports filtering applications by using its unique ThreaSense scanning technology and transmitting data through POP3 and HTTP protocols. You can select a port to set the browser and email client for retargeting communication filtering. Network protocol filtering is very important in some environments. If you do not want others to use some network protocols, you can use network protocol filtering to set some content, for example, the P2P protocol occupies a considerable amount of bandwidth, not only downloading but also uploading.

Figure 10 protocol filteringSpam Protection System

ESS provides rich anti-spam functions and many options. You can set them in detail. ESS has a powerful email content filtering tool. Based on some variables such as topic and sender