Murus

Overview

Murus is a powerful cybersecurity toolkit specifically designed for macOS, aiming to fully leverage built-in system capabilities to provide comprehensive protection from the network layer to the application layer. The suite includes various firewalls and network utilities tailored to meet diverse needs, ranging from casual users to professional administrators.

Suite Details

1. Murus (PF Firewall GUI)

Core Functionality:
As the cornerstone of the Murus suite, it fully unlocks the power of macOS's built-in, robust PF firewall.

Features and Advantages:

• Simple and Efficient Interface: Offers an extremely intuitive graphical interface to easily manage and configure complex firewall rules without needing to memorize cumbersome command-line commands.
• Deep Network Control: Fully utilizes all professional features of the PF firewall for designing and implementing complex network architectures.
• Performance Monitoring and Active Filtering: Enables real-time monitoring of network performance and actively filters dangerous inbound and outbound traffic at the network layer.
• Advanced Feature Integration: Includes advanced security features such as port knocking, adaptive firewall, and Network Address Translation (NAT).
• High-Speed Logging System: Features a fast logging system for efficient tracking and analysis of network activities.

2. Vallum (Application Layer Firewall)

Core Functionality:
An advanced application-layer firewall focused on intercepting and controlling all network connections made by applications running on macOS, to protect user privacy.

Features and Advantages:

• Intuitive Rule Creation: Features a simple yet powerful user interface that allows users to quickly create firewall rules by dragging and dropping application icons.
• Powerful Core Engine: Its core AFW engine provides professional users with deep customization capabilities for rule sets, with logic and syntax similar to the PF firewall.
• Certificate and Application Verification: Can verify the authenticity of applications and their digital certificates, ensuring software is legitimate and unmodified.
• Integrated Bandwidth Control (Snail): Includes the Snail component, enabling bandwidth monitoring and throttling on a per-application basis.

3. Vallum Endpoint Security (Endpoint Security Solution)

Core Functionality:
The ultimate solution for macOS endpoint security and process management.

Features and Advantages:

• Deep Process Interception: Designed to intercept every process execution attempt, offering protection at the most fundamental level.
• Granular Process Control: Provides full control over which processes are allowed or blocked, with rules fully customizable by the user.
• Enterprise-Grade Protection: Specifically designed for individuals or enterprises requiring high-security and strict process control.

4. Snail (Application Bandwidth Manager)

Core Functionality:
A standalone application for monitoring and regulating network bandwidth usage on a per-application basis.

Features and Advantages:

• Real-Time Traffic Monitoring: The main window clearly displays real-time bandwidth usage for each application and total network traffic.
• Per-Application Throttling: Offers convenient control sliders next to each application to easily adjust its bandwidth limit.
• Bandwidth-Saving Tool:
  • Mobile Data Management: Automatically enables bandwidth limiting when connected to an iPhone personal hotspot to conserve valuable mobile data; disables automatically when connected to home Wi-Fi or Ethernet.
  • Optimized Shared Bandwidth: During remote work, reduces bandwidth usage for applications like video calls, saving data and improving network experience for other users.

5. Adsorb (Network-Level Ad Blocker)

Core Functionality:
A lightweight, fast, and efficient network-level ad blocker for macOS.

Features and Advantages:

• Instant Activation: Extremely easy to use—simply click the small icon in the menu bar (next to the clock) to activate and immediately block connections to known ad servers.
• System-Wide Blocking: Operates at the network layer, blocking ads not only in browsers but also in other system applications.
• Lightweight and Efficient: Uses minimal system resources and does not impact overall system performance or network speed.

6. Scudo (Hybrid Simplified Firewall)

Core Functionality:
A hybrid firewall combining the most basic features of Murus and Vallum, designed for users seeking a simple and user-friendly solution.

Features and Advantages:

• Simplified Integration: Combines basic firewall controls at both the network layer (PF) and application layer within a single window.
• Super Simple Interface: Designed to make firewall configuration accessible to everyone, regardless of technical expertise.
• Comprehensive Protection: Helps protect Mac's network services from unauthorized remote access, while enhancing privacy and security through control over all application network activity.
• Customizable Application Rules: Allows users to choose which applications can access the internet and create custom rule sets for each application and process running on the Mac. It is the ideal choice for users seeking an all-in-one, easy-to-use solution.

Summary

The Murus suite provides macOS users with a complete, modular cybersecurity ecosystem. Whether you are a casual user wanting to block ads with a single click, or an IT professional requiring deep control over network traffic and process execution, you will find the right tool within this suite. Its diverse product lineup ensures comprehensive coverage from basic protection to enterprise-grade security management.