Features

Right now Floodspark Counterespionage Firewall (CEF) can...

Detect

• Tor browser, with minor delay
• Chrome Incognito, with minor delay, over HTTPS
• Firefox Private Browsing
• Chrome-Selenium in its default configuration
• cURL in its default configuration
• Wget in its default configuration
• Fake Googlebot

Act

Blocking mode

The offending IP will be blacklisted for 10 minutes.

Honeypot mode

The offending IP will be invisibly redirected to a honeypot version of your real website.

Record

In either Blocking or Honeypot mode intelligence continues to be collected in the background.

Search and Visualize

CEF's ELK Docker container serves two purposes: it serves the Kibana-based Analyst Dashboard that supports search and visualizations, and it can itself be monitored by CEF to serve as another data source / sensor.

---

Future features