Question: Does anybody know something like little snitch (application firewall) but with centralized rules support (something we can "push" to every macbook?).
Ask HN: Little Snitch but with centralized rules?
1–4 of 4 posts
Re: Ask HN: Little Snitch but with centralized rules?
#2Also, what are you trying to protect against using Little Snitch in this way? Are you a paranoid group of journalist dissidents who are suspecting targeted spyware, or are you just frustrated that installed apps "call home" to check for updates and whatnot?
Perhaps you should better invest in setting up a traditional firewall on the lan for central configuration. Then you also have the option for other IDS systems, such as https://www.snort.org/
Re: Ask HN: Little Snitch but with centralized rules?
#3Now, what would a non-technical user even benefit from Little Snitch? Also, what are you trying to protect against using Little Snitch in this way? Are you a paranoid group of journalist dissidents who are suspecting targeted spyware, or are you just frustrated that installed apps "call home" to check for updates and whatnot? Perhaps you should better invest in setting up a traditional firewall on the lan for central…
Of-course we also have a "traditional" firewall on the LAN. But this is not on the application level but on the network level.
Re: Ask HN: Little Snitch but with centralized rules?
#4Now, what would a non-technical user even benefit from Little Snitch? Also, what are you trying to protect against using Little Snitch in this way? Are you a paranoid group of journalist dissidents who are suspecting targeted spyware, or are you just frustrated that installed apps "call home" to check for updates and whatnot? Perhaps you should better invest in setting up a traditional firewall on the lan for central…
Non-technical people benefit from the application-level firewall just as well as technical users. Indeed the calling-home and also as an extra layer of protection against generic nastyness. Of-course we also have a "traditional" firewall on the LAN. But this is not on the application level but on the network level.
This can't be right, as you yourself originally stated `for the non-technical persons in our company its near to impossible to identify "good" from "bad" connections.`.