Show Posts
1
Zenarmor (Sensei) / Application detection accuracy
« on: October 16, 2020, 01:16:08 pm »
Hi, I'm new to Sensei, using the free edition at the moment,
I have found some traffic labelled as 'proxy' which shows 'NordVPN' when drilled down. The devices are android tablets without a NordVPN app visibly installed. Spotify clients are installed. I'm not sure how Sensei identifies specific applications by their traffic. Is it likely that this is a false positive identification of the NordVPN application or a malicious non-visible app using NordVPN to ex-filtrate data?
Many thanks
I have found some traffic labelled as 'proxy' which shows 'NordVPN' when drilled down. The devices are android tablets without a NordVPN app visibly installed. Spotify clients are installed. I'm not sure how Sensei identifies specific applications by their traffic. Is it likely that this is a false positive identification of the NordVPN application or a malicious non-visible app using NordVPN to ex-filtrate data?
Many thanks