Features

Right now Floodspark Counterespionage Firewall (CEF) can...

Detect

• Tor browser, with minor delay
• Chrome Incognito, with minor delay, over HTTPS
• Firefox Private Browsing, with minor delay
• Chrome-Selenium in its default configuration, with minor delay
• cURL in its default configuration
• Wget in its default configuration
• Fake Googlebot

Act

Blocking mode

The offending IP will be blacklisted for 10 minutes.

Honeypot mode

The offending IP will be invisibly redirected to a honeypot version of your real website for 10 minutes.

Record

In either Blocking or Honeypot mode intelligence continues to be collected in the background.

Search and Visualize

CEF's ELK Docker container serves two purposes: it serves the Kibana-based Analyst Dashboard that supports search and visualizations, and it can itself be monitored by CEF to serve as another data source / sensor.

Also note

• In cases such as when CEF verifies Googlebot, the IP will be added to a whitelist for 10 minutes.

---

Future features