Rapport Trusteer NatWest

**xoggoth** · 8 April 2010, 17:04

I use it and it doesn't seem to cause any problems anyway. There's a little green bit next to the address bar where you can click to pop up menu that allows a site to be selected for protection. It appears to provide quite a few protections. Here's cut n paste of the last weekly report that gives some clues:

No. of blocked screen capture events: 0
The following processes tried to capture an image of a protected website. Rapport blocked these screen capture attempts. These processes are not necessarily malicious. Some applications may take screen shots as part of their regular operation. There is no action you need to take. Rapport will continue blocking screen capturing attempts as long as sensitive information is presented.
No. of certificate mismatch events: 0
The following protected websites presented a malformed certificate, indicating that the website does not present a genuine proof of identity. There is no action you need to take now. When you access a protected website that has a malformed certificate, Rapport will present a warning and allow you to block access.
No. of blocked IP addresses events: 0
The following IP addresses were tagged as suspicious. When you access a protected website, Rapport checks the IP address against a list of known good addresses for this website. If the address is not found in the list, Rapport replaces it with a known good address for the website. There is no action you need to take.
No. of blocked browser add-ons events: 0
The following browser add-ons (also known as toolbars or BHOs) are blocked during your sessions with protected websites. The add-ons were not removed and will continue to function while you are not connected to a protected website. The add-ons were blocked because they violate the security policy set by the website's owner or Trusteer (usually it means that the add-on is not properly signed). You do not have to take any action. However, you can review the list below and, if you find an unfamiliar add-on, consider removing it. If you wish to allow a specific add-on to function while you are connected to a protected website open Rapport Console and choose 'Manually approve add-ons'.
No. of blocked cookie access events: 2
Websites, such as your bank, may store cookies containing sensitive information in your browser. These are legitimate cookies which are required for the normal operation of the website. Using various techniques, criminals can steal these cookies from your computer, and can use them to take over your bank or other web accounts. When Rapport detects a vulnerability that can potentially lead to the theft of a sensitive cookie from your computer, it shields the cookie and prevents its capture. You are not required to take any action.
Apr 04 2010 10:11 Rapport prevents the capturing of NatWest cookie ASPSESSIONIDCQCQQAAB.
Apr 04 2010 10:08 Rapport prevents the capturing of NatWest cookie ASPSESSIONIDCQCQQAAB.
No. of blocked process alteration events: 0
Rapport blocked attempts to alter the following browser functions. Altering browser functions is a technique that allows taking over the browser and getting access to your sensitive information. This technique is used by malware but also by some legitimate software. Rapport blocks suspicious attempts to alter browser functions. This does not necessarily mean that you have malware on your PC. By blocking these attempts Rapport protects you whether the attempt was made by malware or by good software. You do not need to take any action.
No. of blocked process access events: 0
Rapport blocked the following processes from accessing the browser. Processes on your computer can access the browser and read sensitive information or tamper with your transactions. When you are connected to a protected website Rapport blocks processes from accessing the browser regardless of whether the process is malicious or not. This does not necessarily mean that you have malware. By blocking these attempts Rapport protects you whether the attempt was made by malware or by legitimate software. You do not need to take any action.
No. of credentials submission events: 0
The following protected credentials were entered into a different website. When you go to a website and enter text that matches the username or password of one of your protected websites, Rapport analyzes the website and if the website is unknown it triggers a warning which requires your action. By doing this Rapport protects you against fraudulent websites that try to steal your credentials. This attack is also known as phishing.
No. of password keystroke protection events: 2
The following password submissions were protected against keystroke logging. Rapport has prevented any access to keystrokes while you were submitting a password to these websites. This does not necessarily mean you have keyloggers on your PC. However, if any of the applications on your PC tried to log keystrokes while you were entering information to the websites below it failed. You do not need to take any action.
Apr 06 2010 20:02 Password field on NatWest. Anti-keylogging activated.
Apr 04 2010 10:07 Password field on NatWest. Anti-keylogging activated.
No. of blocked process alteration events: 0
Rapport blocked attempts to alter the following browser functions. Altering browser functions is a technique that allows taking over the browser and getting access to your sensitive information. This technique is used by malware but also by some legitimate software. Rapport blocks suspicious attempts to alter browser functions. This does not necessarily mean that you have malware on your PC. By blocking these attempts Rapport protects you whether the attempt was made by malware or by good software. You do not need to take any action.

**Fishface** · 20 April 2010, 14:33

hmmn, but wouldn't the certificate window on IE 8 light up like a burning flame if there was something going wrong between the browser and the server?

I doubt the bank would store anything secure in a cookie.

No add-ons for me.

I have a dongle to provide a random number for credemtials.

I do not see the purpose of it - that is unless they believe most users are stupid.

It seems odd that it is being plugged in the UK and it not used on US internet banking.

**NotAllThere** · 20 April 2010, 16:05

I use it with First Direct. But no Swiss banks use it.

Rapport Trusteer NatWest