sherlock62 wrote:
Bluecoat was in it's prime in 2012 or so. Today, forget it. Not current so leaves you with iffy filtering, etc. As for Open DNS... aok.
I've found that AdBlock Plus/AdBlock Edge, running the browser in a sandbox and/or VM, enabling "click to play", and when actually downloading an executable, running it past VirusTotal provides enough protection.
The only two AV utilities I've found worth the time of day is Malwarebytes, and the reason I mention that, is that it blocks by IP. The other utility is SpywareBlaster, and the nice thing about this utility is that it only runs to update blacklists, like Windows killbits, sites blocked from setting cookies, restricted sites in Internet Explorer, etc.
I like keeping things simple. By isolating the web browser in a sandbox of VM, if it gets infected, the damage is quite well contained. To prevent the browser from getting nailed in the first place, the bad sites get blocked.
As for security, NIST has some good guides and checklists for securing an OS. They are likely way past what a home user needs, but can be useful as a starting point.
