Agnitum Newsletter (November 23, 2005)
http://www.agnitum.com

- IN THIS ISSUE –
(*) Company update: Agnitum licenses firewall technology to Lavasoft
(*) Technology focus: Ethernet protection in Outpost 3.0

COMPANY UPDATE: AGNITUM SIGNS LICENSE AGREEMENT WITH LAVASOFT

Agnitum has signed a technology transfer agreement to enable
Lavasoft to incorporate some of the functionality of the
award-winning Outpost Firewall PRO engine into their
products.

Lavasoft, best known for its Ad-Aware product range, will
extend its security offerings with the addition of a
Lavasoft Firewall, which will include Outpost’s Attack
Detection plug-in. (The other six Outpost Pro plug-ins will
remain an exclusive benefit for Agnitum’s customers).

Outpost Firewall PRO has received numerous awards and
accolades from leading computer magazines and security
experts for its powerful protection and rich usability
features; its baseline firewall capability has been a
driving force behind partnership deals with industry
heavyweights such Novell, Sophos and many others.

To learn more about this agreement, see
http://www.agnitum.com/news/lavasoft.php.

************************************************************************

TECHNOLOGY FOCUS: ETHERNET PROTECTION IN OUTPOST 3.0

Outpost Firewall 3.0 is such an extensive, full-featured
product that it’s easy to miss some of the important
protection capabilities it brings you. This month, we take a
closer look at how Outpost 3.0 protects you against Ethernet
attacks.

Ethernet attacks can result in system hangs,
denial-of-service attacks, theft of data in transit in
chat and IM sessions, and a number of other security
threats. In order to reliably defend against Ethernet
attacks, a firewall must be able to deal with an
attacker on the ARP protocol level, by detecting and
blocking ARP requests for not only port scanning. It
also should be able to detect and prevent other
Ethernet-specific attacks.

Outpost 3.0 detects and prevents Ethernet attacks such as IP
spoofing, ARP scanning, and ARP flooding by examining
Ethernet and Wi-Hi traffic on the ARP level. It also blocks
ARP replies in cases where there has been no corresponding
request from the system.

To learn more about advanced network protection in Outpost
3.0, download our Ethernet Attack Protection TechNote at

http://www.agnitum.com/download/Ethernet_A..._Protection.pdf

Good stuff... Hey where's ddd?

BTW, the new Outpost Pro/Blockpost combo is not compatible with the BLM any longer. Blockpost gives a format error when trying to read the output file from the BLM.

Thanks for that setsune... can you provide a sample of what the file should look like in order to be comatible? If not, hopefully someone with the new version can help.

I intend on making BLM able to read in the Outpost Log as well as export to the Blockpost plug-in file.

Mmmm, integration with Outpost would be awesome

Ok, I got it to work, the problem is, that you have to use the manual converter in the BLM or here on the site to have it work right. The BLM converter, et al in the current BLM doesn't properly convert the lists to Blockpost format. It left large blank spaces in the output file, which the plugin couldn't read. So, I tried running it through the manual convert sequence on the site and in the BLM, with the Load Listview with Memory Array option enabled, and it converted and made a proper output file that way. I also used less source sets, and that seemed to help alot. Apparently there are still issues with the Blockpost plugin using large rulesets.

Current Blockpost V3 format hasnt changed from V2 format so the BLM shouldnt have any problems in that area.

I have BLM 2.6.3 / Outpost 3.0557.5918 [437] / Blockpost 2005_11_14.exe , everything works fine with converting / exporting the lists I use to Blockpost format here.

Are you talking about the auto update not working setsune , since manual convert and export in BLM work for you ?