|F-Secure Antivirus & Internet Security|
F-Secure Internet Security offers what many other antivirus programs do not--a complete family protection package. Its revolutionary system combines firewall and antivirus and browsing protection while giving you complete control through the use of advanced features such as security, spam filtering, and parental control.
Getting the product installed on twelve virtual machines crawling with malware was a truly dreadful experience that only ended when F-Secure's technicians discovered and fixed a bug in the company's bootable Rescue Disk. It went on for over a week, which may be a new record.
Once I recovered from installation trauma, though, F-Secure performed extremely well. It detected 86 percent of the malware samples. F-Secure didn't exhibit the highest detection rate in my malware blocking test. F-Secure gets high marks from independent lab AV-Test and even higher marks from AV-Comparatives. It's lab results are better than most overall.
DeepGuard Behavior Monitoring
As an adjunct to traditional signature-based malware detection, F-Secure's DeepGuard system monitors active processes and flags suspicious behavior, including attempts by suspect programs to access the Internet. DeepGuard did block a few of my hand-coded test programs, but I consider that completely reasonable.
Enhanced Online Safety
F-Secure's standalone antivirus doesn't include active blocking of malicious websites. That comes with the suite's Online Safety component, and in testing it worked very well. When I attempted to download my current malware collection again, it blocked all but one still-active item at the URL level and blocked the remaining one at the start of the download process.
This same feature also protects against phishing sites—fraudulent sites that imitate PayPal, eBay, your bank, or other sensitive sites in order to steal your login credentials. Since the actual phishing sites available are different for every test, I report the difference of each product's detection rate from that of Norton, a consistent phishing success.
F-Secure's detection rate was 16 percentage points below Norton's, which is actually quite good. Only a quarter of recent suites have beaten that rate. That's also a big improvement over F-Secure's previous product.
Ineffective Parental Control
Many, many users have no need at all for parental control, so I don't penalize a suite for omitting that feature. However, if they're going to include parental control, it has to work. F-Secure's doesn't.
By default, the Online Safety component enables blocking of harmful websites for all users, but leaves the content filtering and Internet time limit features turned off. Its main window lists all Windows user accounts; from here you can turn on those parental control features for each child's account.
Like McAfee, F-Secure warns against attempting to apply parental controls on an account that has Administrator privilege. If you've given your teenage son an Administrator account to avoid the annoyance of logging in every time he wants to install a game, the parental control system is toothless. When the content blocker stops him from looking at scantily-clad girls, he can just click a button to look anyway. If the time limit feature blocks Internet use, he can override it.
Even if you only apply parental controls to kids with Standard / Limited accounts, the parental control system is porous. Like Trend Micro's, it only works with supported browsers, so an off-brand browser is a free pass to the whole Internet, even the naughty parts. And you can't even check where the kids have been; all you get are numbers on sites visited and blocked.
You definitely can't rely on this suite for parental control. If that's a feature you need, consider a suite that does it better, say, Bitdefender, or Kaspersky.
Another facet of Online Safety is banking protection. F-Secure doesn't launch banking sites in a separate secure browser the way Bitdefender and Trend Micro Titanium Maximum do. Rather, it displays a banner across the top and actively protects your regular browser.
While banking protection is active, you can only access Web pages directly related to your banking activity. That makes sense—what if you switched to a page of lolcats and forgot you had left your account logged in? It also puts all other network connections on hold, and prevents new connections, so a Trojan can't "phone home" with your private information.
It definitely worked to block non-banking sites. I couldn't even link to the F-Secure page with "more information" about banking protection.
Improved Spam Filter
If your email provider filters out spam, having your own local spam filter can be irrelevant. If not, it can be a life saver. F-Secure filters POP3 email, but doesn't integrate with any email clients. That means you'll have to define a message rule to divert messages with [SPAM] in the subject line into their own folder.
Settings couldn't be simpler. There's one switch to turn spam filtering on and off, and a checkbox to enable prefixing spam message headers with [SPAM]. Do double-check this last item; in the version I was given to test, it was turned off by default.
F-Secure didn't slow the download process appreciably. It blocked just one valid message out of thousands, a quantity so small that it rounds to zero percent. However, it let nearly 20 percent of undeniable spam into the Inbox.
Windows Firewall Plus
Modern versions of Windows, especially Windows 7 and later, have a very effective firewall built in. Like Trend Micro, F-Secure keeps the Windows Firewall in place, helping it out around the edges.
The DeepGuard monitor that I mentioned earlier controls whether suspect programs are allowed access to the Internet. It leaves that decision up to you, so you'll have to pay attention to popup queries and hope you answer correctly. On the plus side, DeepGuard's monitoring is truly deep. When I tested it with leak test utilities that attempt to evade program control, it detected every single one of them. Many popup-style firewalls simply don't detect this activity and hence can't control it.
Even the standalone F-Secure antivirus was fairly effective at neutralizing the files dropped by an exploit. The harmful download protection component in the suite did an even better job. It blocked all the exploits that the antivirus did, most of them at the network level, plus a few more. Only a third of the exploits got past it, and none of them actually breached the test system's security. Note, though, that Norton blocked every single one of the over-thirty exploits at the network level, so none of the attack files ever reached the test system.
Alas, a determined malware coder could definitely shut down F-Secure's protection. I had no trouble stopping and disabling its essential services. I also managed to terminate all of its processes using Task Manager. They did come back—it was a bit like playing Whack-a-Mole—but I imagine a malware expert could take control to prevent process reanimation.
Safe Profile for Facebook
We all know someone who seems to be on Facebook every minute of the day. You post something, they "like" it three seconds later. Or perhaps you are that person, to your friends. When that much of your life takes place in social media, it's really important to configure privacy settings correctly.
Log into your Facebook account through F-Secure's Safe Profile and you can get a report on all areas of your profile. It's a bit like Trend Micro's Privacy Scanner, though Trend Micro also checks Twitter and Google+.
I tried to run a scan on my virtual machine test system, but it reported that it's not compatible with Internet Explorer 8. Since those using Windows XP can't upgrade past IE8, XP users are out of luck. I switched to a Windows 7 system to continue.
The report showed nothing amiss, but that's perhaps to be expected, since I had tuned up with Trend Micro's scanner just last week. I logged into my account, threw several setting wide open to public view, and tried again. Ooops! You must wait ten minutes between scans.
When I did manage a re-scan, it still gave my profile a clean bill of health. I'm not entirely convinced this feature is doing what it ought to.
Very Minor Performance Impact
F-Secure doesn't load this suite down with bonus features, it doesn't have a full-scale firewall, and its core antivirus is compact. My real-world performance tests showed that it has an unusually low impact on system performance. Do note that these days even a relatively high impact isn't huge.
Getting security components loaded at system startup can slow boot time, so I measured boot time with no suite and with F-Secure installed. The difference was negligible; F-Secure slowed the boot time by just 5 percent. The average for current suites is a 23 percent slowdown, so F-Secure looks good.
It also had a very small effect on the time required to run my file move/copy and zip/unzip tests. The script that moves and copies big files across drives ran just 2 percent slower under F-Secure, and the one that zips and unzips that same file collection ran just 7 percent slower. The current suite averages for those tests are 20 percent and 16 percent respectively, so F-Secure looks quite good. You'd be hard-pressed to notice a difference between this and Webroot's even-smaller impact.
Conclusion - Antivirus the Best Part
If you can install F-Secure on a clean system, bypassing the possibility of malware interfering with installation, its antivirus protection is great. The independent labs give it good marks, and it topped all recent programs in my hands-on tests. The suite's Online Safety component enhances that protection by blocking access to malicious and fraudulent sites.
Spam filtering is certainly simple, with almost no configuration, but it let more spam through than the best products. Don't rely on this suite for parental control, though; it doesn't work. And I'm not entirely sure what to think of the banking protection and Safe Profile features.