4 ms·
> What I have for native applications that I don't for the web is the ability to firewall off the native applications. There you're placing trust on the firewa
by tiagod 4y ago
> What I have for native applications that I don't for the web is the ability to firewall off the native applications.
There you're placing trust on the firewall's sandbox. Are you sure the application can't communicate with the outside at all? DNS exfliltration for example?
- JohnFen 4y agoA firewall is not a sandbox, but yes, I am sure that the applications can't communicate with the outside at all. My logs would show if they were. Any and all packets that originate from them are dropped, including DNS lookups and the like.