MRG Effitas: RAT protection report v2.2

petr0vic

MRG Effitas: Protection Comparison of Proxy and Next-generation Firewall architecture against RAT and ransomware C&C

Results of the RAT tests
The following table summarizes the results:





Conclusion
The proxy architecture is more secure by default compared to the Next-generation Firewall architecturebecause the architecture itself breaks multiple C&C channel classes, tunnelingprotocols and evasion techniques by . By blocking access to these different channels, IT and ITSEC can focus monitoring and policies on the remaining channel (malware using HTTP/HTTPS with proxy support)



https://www.mrg-effitas.com/wp-content/uploads/2017/10/MRG_Effitas_RAT_protection_report_v2.2.pdf