I have a question regarding approach to online security and protection against viruses, malware and phishing by one of the biggest European ISP. Below you will find my understanding of the topic. Is ISP's approach safe? Would you use it? Do you know similar solutions/implementations? Is it worth to sacrifice privacy for this kind of safety?
The cyber shield logic:
- Security team known as CERT in Orange ISP in Poland and Moldavia released service called "Cyber Shield".
- Cyber Shield is a traffic monitoring middleware set between your router and the grid - ISP sees your requests and prevents you from visiting dangerous websites, but also can detect various trojans or ransomware going both directions (from and to your PC).
- If you happen to click a phishing link, visit an infected website or distribute malware you will either be blocked by ISP's warning similar to the one generated by Chrome, when you visit "insecure content" or the internet access will be completely blocked.
- ISP claims to be able to recognise susceptibility of devices present in your local network to external threats and can block the connection if safety requirements are not met.
- If danger is identified, ISP provides customer with detailed instruction regarding problem solving, e.g. scanning for viruses, setting up wi-fi password, disabling remote access to your router's configuration panel.