cancel
Showing results for 
Search instead for 
Did you mean: 

Product Feature Suggestions

Hi big M ,

I like the HIPS system, I like to be able to vet TCP/IP sessions to prevent apps from dialling out.

One feature I have noticed on a few software firewalls is a "resolve" button near the destination IP address listing.

This would do a reverse lookup on an IP address and possibly a whois to determine who and (where?) exactly this remote host is.

This is a quick way to determine where some svchost.exe or NTOSKRNL.exe binary is talking to:

error-reporting.Microsoft.com (updates, etc OK)

dynamic3jds3dsllgr.BulletProof-MALwareHost.cn (DANGER WILL ROBINSON )

Might be a useful feature to introduce? Maybe could be disabled by policy for corp lans without external DNS, etc

Thanks,

xxxViriiHunter666

0 Kudos
2 Replies
bgable
Level 11

Re: Product Feature Suggestions

Can you file an FMR for this request?

https://secure.nai.com/apps/downloads/products/product.asp

0 Kudos

Re: Product Feature Suggestions

Done.

FER generated!

Oh! mcafee with your *ER and *SR's haha

MER FER ESR TSR

requires recommended request remain resident!

0 Kudos