Webroot was founded in 1997. The initial Webroot offering was the popular Windows Washer application and was useful in cleaning tracking cookies and other undesirables in the early days of online threats and detection. Eventually Webroot moved into the spyware blocking space and later introduced their first consumer security suite, Webroot Internet Security Essentials, in 2008. This latest installment of the Security for Everyone series will take a look at Webroot Internet Security Essentials 2011. Let’s begin.

First Impressions

Previous versions of Webroot Internet Security Essentials required completing an online form and being emailed the link and activation code. Webroot seems to have done away with this practice, thankfully, and provides a trial version of Webroot Internet Security Essentials 2011. The initial download is light at less than 6 MB.

The install wizard is very simply and only presents one question asking if you would like to join the WARN (Webroot Automated Research Network). This option is selected by default.

The final step in the install wizard presents an option to scan the computer upon completion. This option is selected by default. This is another welcome change from the previous version where the initial scan was done manually or kicked off the first time via the scheduled sweep.

The Webroot Internet Security Essentials 2011 home screen is very simple providing access to the four main areas of the application: PC Security, Sync and Sharing, System Cleaner and Identity and Privacy. In addition to these four areas, you also have easy access to your account, program settings, notifications and support. There is even a handy link to an online video tutorial introducing you to this latest version of Webroot Internet Security Essentials 2011.

Webroot Internet Security Essentials 2011 appears to demand little of system resources. There are two running services, the Webroot Client Service and the Spy Sweeper Engine. Together these services use a little less that 50 MB of memory resources. I also checked to see how easily the Webroot service could be stopped since many malware and virus applications target the disabling of services. My attempt to stop the Spy Sweeper engine was not allowed. However, I was able to end the client service.

Webroot Internet Security Essentials 2011 has made significant changes to the interface in this latest version. It appears the changes have been focused on simplifying the application, an effort that does bear fruit.

Ease of Use and Configuration

The Home screen provides access to the options associated with the four main areas by simply hovering your mouse over an area. This action also shows basic stats such as when a scan or cleanup was performed.

The PC Security area provides access to Scan, Shields, Firewall and Quarantine.

The Scan tab allows you to begin a scan or define the settings for a custom scan. You’ll also find details regarding the last scan and a toggle switch indicating whether or not automated scanning is enabled. Lastly you will find access to the area where a scheduled scan may be set. Before you can schedule a scan it is necessary to turn off the automated scanning.

When defining a Custom Scan you can choose from several options, including registry, memory objects, cookies and compressed files. You can also choose where to scan for threats at the drive, directory and file level. Identifying file types to exclude from the Scan is also an option. Lastly there is an option for direct disk scanning which is useful for identifying a specific type of threat known as a rootkit.

The Shields tab provides access to those areas actively monitored by Webroot Internet Security Essentials 2011. Shields monitor items like downloads, ActiveX objects, changes to browser homepages and much more. You have the option of using the Webroot recommended protection or setting your own options. Each shield is grouped into a category of three shield types, each with an area providing access to associated options.

Real-time active protection focuses on Windows system settings. Here you can choose to disable or enable the following shields:

• File System shield.
• Execution shield.
• Startup Items shield, with the option to edit items auto starting on you computer.
• ActiveX shield.
• BHO (Browser Helper Object) shield, with the option to disable an installed BHO.

Browser protection lets you choose to disable or enable the following shields:

• IE (Internet Explorer) Hijack shield, with options for setting your home page and default search provider
• IE (Internet Explorer) Security shield.
• Favorites shield.
• Tracking Cookies shield.

Network Protection lets choose to disable or enable the following shields:

• Hosts file - detects changes and allows for removing items from the hosts file;
• Internet Communication - blocks sites known to be related to spyware or adware.
• Email Attachments shield - simply monitors attachments if you are using a local mail client like Windows Mail or Thunderbird. There is no support for web based email accounts or SSL connections from a local client.

The Firewall configuration is very light. There are none of the more advanced options like port forwarding and sandboxing. The default is to Filter traffic yet you can choose to Allow all or Block all. The configuration is grouped into four sections: Security location, Process Monitor, Applications and Custom Security alert handling.

Security location does as its name implies and allows you set security based on the location. Here you can choose your profile (Home, Work, Remote) and determine the profile settings which allow you to choose between High or Low Internet network security or High or Low local security. The default for Network Security is High while Local Security is Low. You also have the option to edit local network and redefine which networks may or may not be trusted.

The Process monitor simply allows for enabling or disabling this option. While enabled you will be prompted if any threats are identified among running processes.

The Applications section shows which applications are allowed and which are being blocked. The interface allows for adding and removing applications.

The Custom security alert handling lets you choose between standard control or manual control. Manual control lets you choose among showing notifications for suspicious network communications, suspicious applications or both.

The Quarantine lets you easily manage items as well as see detail for an item. Deleting or restoring is as easy as selecting the item and choosing the appropriate option.

The next main area of configuration is the Sync and Sharing area. With a Webroot Internet Security Essentials 2011 subscription you can choose to backup your files on Webroot servers. Webroot has also introduced an option to sync files between computers using the Magic Briefcase.

When backing up files, you simply choose the files to protect. A monitor is available showing how much online disk space is being used. File sync can be achieved by placing files into the Magic Briefcase. Any file in the Magic Briefcase will be automatically synchronized with any other sync enabled computer associated with your Webroot Internet Security Essentials 2011 account. You also have online access to your data online via a link to “My Data Online”.

System Cleaner is the next main area for configuration. Here you can choose the areas to be cleaned and set a cleaning schedule if you so choose. Areas to be cleaned include Internet items, Windows items and third party programs. Internet items cover Internet Explorer and Firefox, and handle things like clearing your browsing history, stored passwords, form data and more.

For Windows items the areas to clean include lists of recently opened files, temporary files, find and search history, clipboard items and more. There is also an area to clean selected parts of Microsoft Office such as recent files lists and the option to delete inbox, sent items and deleted items within Microsoft Outlook.

Webroot Internet Security Essentials 2011 allows cleaning of certain third party applications as well. Third party apps may include Photoshop, Opera, Paint Shop Pro and more. Cleaning likely involves recent files lists and associated temporary files.

You can access additional program options from the Settings link within the ribbon at the bottom of the Webroot Internet Security Essentials 2011 interface.

Here you can update or add scheduled items, access history, set update options and define proxy settings. There is also an option referred to as Gamer Mode. If enabled, it will disable all alerts and most Shields for a default period of four hours. The intent of Gamer Mode is to reduce the number of interruptions while gaming.

Finally, the bottom ribbon provides access to any notifications requiring a response. Selecting notifications will give you the chance to review any pending requests and answer them accordingly.

There you have it. An introduction into the use and configuration of Webroot Internet Security Essentials 2011. Next we will take a look at how well the default firewall configuration protects the PC.

Firewall

As previously mentioned, the Webroot Internet Security Essentials 2011 firewall is certainly light on configuration options. The question becomes, do the lack of firewall features compromise security?

When testing a firewall I like to run intrusive scans from nmap and Nessus. Each tool has its strengths and does a very good job of identifying vulnerabilities. A scan from each tool produced exactly the same results. While the results were not terrible, the amount and type of information displayed was more than I would like to see. Each system identified several open ports and was able to use this information to gather network details, operating system version, logged on user name and a few other bits.

Once these scans completed, I accessed the Webroot Internet Security Essentials 2011 firewall configuration and set the Home security zone network security level to high, the default is low. I then re-ran the intrusive scans hoping to see less telling results. I wasn’t disappointed.

The Nessus scan produced no results. None. The nmap scan did produce results but was only able to identify a few open ports and could not correctly identify the operating system version. The image below shows the drastic difference in ports identified as open or filtered. Very impressive.

The firewall is not too intrusive with the number of application and Internet prompts. Each one I came across seems to warrant the confirmation.

I’m happy to report the firewall does indeed perform well and the lack of advanced options shouldn’t be missed by many people.

Antivirus and Antispyware features

The antivirus and antispyware features within Webroot Internet Security Essentials 2011 performed as solidly as the firewall.

My testing included navigating to several questionable sites most of which were blocked from access entirely. When I encountered a tainted download or two, the shields sprang into action and prevented any undesirable from making it onto the system.

I never encountered a single false positive, yet if I had the quarantine is very easy to access and manage from the PC Security area. The act of restoring an item from quarantine is as easy as selecting the item and choosing ‘Restore Selected Items’’.

I’m not the only one singing the praises of Webroot Internet Security Essentials antispyware and antivirus. The folks at Virus Bulletin and ICSA Labs each gave high marks to Webroot Internet Security Essentials.

Verdict

I didn’t have many dealings with Webroot prior to this review. For this reason I stayed away from most other reviews while writing this. I have to admit I am a bit surprised at how impressed I am in this product. Webroot Internet Security Essentials 2011 does a very good job of breaking its interface down into pieces the everyday user can understand and the protection “out of the box” is excellent. This is clearly a Buy for Grandma!.

Purchasing Options

Webroot Internet Security Essentials 2011 can be purchased directly from the site of the manufacturer or from Amazon UK (for European readers) or. If you choose to buy it from Amazon - using the provide links - we will receive a small affiliate commission which will help pay for some of our work on the site. A big thank you to all of you who are buying using these links.

Related articles: