AiProtection - is it possible to track the internal IP address?

[Martin - SNBuser]

It will query an IP reputation registry that is maintained by TrendMicro, and block traffic if the IP is in a ‘badlist’.

Ok, thanks a lot - that doesn't sound very "advanced" or sophisticated to me.... I'll try to see if I can install Skynet and maybe achieve something similar and then I'll consider if I should completely disable AiProtection or keep it... Thanks!

 

[kfp]

Ok, thanks a lot - that doesn't sound very "advanced" or sophisticated to me.... I'll try to see if I can install Skynet and maybe achieve something similar and then I'll consider if I should completely disable AiProtection or keep it... Thanks!

They do have a DPI engine (the signature stuff) that kinda inspects traffic, but with the power of the processors on these devices I doubt they can look too deep into a stream before adding noticeable latency.

There is no one silver bullet for security, a multi-pronged approach would be best ,including user awareness.

 

[ColinTaylor]

It will query an IP reputation registry that is maintained by TrendMicro, and block traffic if the IP is in a ‘badlist’.

It does more than just block malicious websites. Supposedly.

https://www.routeria.com/aiprotection-what-it-is-and-how-it-works/

That's something Skynet can't do.

 

[kfp]

It does more than just block malicious websites. Supposedly.

https://www.routeria.com/aiprotection-what-it-is-and-how-it-works/

That's something Skynet can't do.

Which something are you referring to specifically?

TBH I think they just give some functions different names but ultimately all rely on the reputation system, eg. Malicious Sites Blocking and Infected Device Prevention and Block. I’m guessing the difference is just in checking source IP vs destination IP.

Vulnerability Protection would be the DPI part I mentioned here.

And Router Security Assessment, well, don’t think that’s too useful but that’s just guessing from past experiences with similar feature on other systems, haven’t actually used the one in Asus.

Though I agree Skynet can’t replace all that’s offered but the only one needs replacing

 

[agilani]

Which something are you referring to specifically?

TBH I think they just give some functions different names but ultimately all rely on the reputation system, eg. Malicious Sites Blocking and Infected Device Prevention and Block. I’m guessing the difference is just in checking source IP vs destination IP.

Vulnerability Protection would be the DPI part I mentioned here.

And Router Security Assessment, well, don’t think that’s too useful but that’s just guessing from past experiences with similar feature on other systems, haven’t actually used the one in Asus.

Though I agree Skynet can’t replace all that’s offered but the only one needs replacing

I like that the new version of skynet will add the blocked aiprotect ip addresses to its blacklist.

 

[ColinTaylor]

Which something are you referring to specifically?

I was referring to the DPI. I started writing my reply before your other post went up.