why does latest bitdefender have open firewall defaults ?

DannyDumbkins

why does bitdefender firewall allow "both" inbound and outbound traffic to all ports and not the specific port the application is using ? Can i set defaults somewhere ?

To me this is a major security flaw.

Alexandru_BD

Hello,

I'm not sure I understand your question here.. But maybe this article contains the answers you are looking for:

https://www.bitdefender.com/consumer/support/answer/2082/

Make sure to check this one as well:

https://www.bitdefender.com/consumer/support/answer/13425/

Now, if you can elaborate on what you are looking for exactly, or if something is still unclear after reading the above articles, we can dive into the specifics.

For in-depth information, you can always refer to the user manual.

Regards,

Alex

DannyDumbkins

first off the url's dont lead to any articles. How does bitdefender know if an application is legit

while at the same time giving the keys to the kingdom with all network ports open to the application and allowing inbound traffic ? Why doesnt bit defender only allow the port that the app communicates with ?

If its considered an application gateway … how do you know what application is real and not malware

which by default bitdefender lets through ?

Scott

https://community.bitdefender.com/en/discussion/comment/350499#Comment_350499

Hello, as far as the article link issue, the Bitdefender servers or the forum is experiencing a glitch where all the links are going to the Bitdefender consumer home page. Hopefully, it will be fixed shortly. @Alexandru_BD will follow-up your other concerns.

Kind regards.

Alexandru_BD

Hi,

There's been an issue (outage) with the Support Center itself, but I have received confirmation that it was resolved in the meantime, so the links I posted above should redirect to the relevant articles now.

By default, the firewall analyzes behaviors, MD5s (MD5 is still used in cybersecurity to verify and authenticate digital signatures), signatures, etc. Applications receive a rating system based on behaviors and are blocked or allowed. Subsequently, the firewall can be configured according to user preferences. By design, the developers would not make a firewall that would leave customers vulnerable in any way. Furthermore, the firewall is just one component of an advanced security solution, designed in layers.

The firewall is your gate keeper and the security modules are designed in a specific way, so that IF a defense fails, another one takes its place. For example, the firewall prevents the infection from entering the PC from the network, if the firewall fails, Advanced Threat Defense takes over and blocks dubious processes. If this module misses something, then the Antivirus will find any modification of files during scanning. There's more to the firewall, really, and that's why I recommended those articles, because they paint the full picture on what it can do and how you can fiddle with all its advanced settings.

Regards