Defensewall or Gswall or Sandboxie ?

[iphone]

Hello,

I want to add a Sandbox HIPS to my PC.
I have read messages about Defensewall, Gswall, sandboxie ... but i don't see the big differences between this product.

What is for you the best of this products (and the main differences ?).


Thank's for your help.

[LoneWolf]

-{ Quote: "Hello,

I want to add a Sandbox HIPS to my PC.
I have read messages about Defensewall, Gswall, sandboxie ... but i don't see the big differences between this product.

What is for you the best of this products (and the main differences ?).


Thank's for your help." }-


I'm sure someone here can explain better then myself but i'll give it a shot.
DefenseWall is a Policy Based HIPS.
From GesWall's website : GeSWall is intrusion prevention system that is non-intrusive and easy to use.
http://www.gentlesecurity.com/desktop.html
http://www.gentlesecurity.com/features.html
Sandboxie is a sandbox. Anything in the sandbox will be gone when I close my browser.
They all offer excellant protection IMO.
Currently I'm using DefenseWall and Sandboxie together. Great combo.
If I let something bad out of the Sandbox, DW still runs it as untrusted.
Warning though...GesWall and Sandboxie together is not good. I had a very bad crash with that combo.

[trjam]

yeah, Avira and Sandboxie are a better combo. Still my all time favorite for detection, protection and lightness. Defensewall is good but I can never can get it to work correctly for me, which means the issue is on my side. Geswall will slow down over time without a reboot and Sandboxie may slow browser just a tad.

[Hugger]

iphone,
The best is the one I'm able to use properly and that is backed up by willing knowledgeable suport staff.
I tried Geswall a month ago and had a question.
I posted the question in their support forum.
4 days later no response.
So I politely stated that I do not purchase from companies that don't even take the time to answer simple questions.
They removed the thread.
Go figure.
(Horizon Datasys did the same with a trial of FDISR Rescue. They didn't get my money either.)
My wife uses Sandboxie. That makes me a happy camper. She would download Satan if she felt like it and would never understand why I was becoming a tad upset.
And I'll be installing Defensewall when I build my new pc. Waiting for Bush bucks to arrive.
I've had a positive experience with Ilya ahile back when I couldn't even install his product for a trial. He was very willing to do what was needed to help me.
Very impressive.
Good luck.
Hugger

[djohn]

IMHO Sandboxie Is great.It Does what it says,when there is needs for a patch/update Seems quick and well supported and Is one of the best of the best free products I ever used.It puts some or most paid products to shame.That said, Sandboxie teamed up with a good AV = great protection.

[farmerlee]

Defensewall and sandboxie are a good combo if you're looking for tight security. I have licenses for both but i find that defensewall by itself is enough for my needs. I might engage sandboxie if i decide to venture into the dark side of the web but thats a rare occassion.

[aigle]

-{ Quote: "Hello,

I want to add a Sandbox HIPS to my PC.
I have read messages about Defensewall, Gswall, sandboxie ... but i don't see the big differences between this product.

What is for you the best of this products (and the main differences ?).


Thank's for your help." }-
All are good. Try them one by one and see what u like.

[Reimer]

I used Sandboxie for a couple of weeks and have since moved onto DefenseWall. I find that policy based sandboxes like DefenseWall are just a lot more convenient to use.

With Sandboxie, everything you do with sandboxed processes is done.. well.. inside the sandbox. This includes everything you intentionally download. To access your downloads, you have to move them outside the sandbox later and to do that, you use Quick Recovery. So for someone like myself who downloads often, having to use Quick Recovery all the time is a huge nuisance. Not to mention, once you do recover them, you're not protected from those files in case they do happen to be malicious.

Yes, you can have the files be automatically recovered by giving the sandbox direct or full access to your download folder but I don't like the idea of that, security wise.


With DefenseWall, it's pretty useable out of the box. Downloads through untrusted processes always end up untrusted themselves. No having to recover downloaded files all the time or whitelisting processes so that only certain ones can run in the sandbox only to come upon a file and not being able to open it.


Ending my short sandboxie rant and recommending DefenseWall. Of course, all three can be used freely or one a 30 day trial basis so give them all a try and see which you like best

[Peter2150]

-{ Quote: " Not to mention, once you do recover them, you're not protected from those files in case they do happen to be malicious.


" }-

Not quite true. For most of what I download I just recover it, and I don't worry, but if I am suspicious I right click it and run it in a separate sandbox, that allows no internet access. Then if it's good fine, but if not I just clean sandbox and delete the file.

[EASTER]

-{ Quote: "Not quite true. For most of what I download I just recover it, and I don't worry, but if I am suspicious I right click it and run it in a separate sandbox, that allows no internet access. Then if it's good fine, but if not I just clean sandbox and delete the file." }-

Very good and accurate advice. That's the best way to utilize it and for them both together with DW it's a bonus.

I'm not sure how Run Safer (OA) & DW would do together, perhaps Peter2150 can weigh in on that particular combo if it's useful or redundant or not.

EASTER

[Makav3l1]

If you're looking for a free solution. Between GeSWall or SandboxIE I would recommend GeSWall.

[innerpeace]

-{ Quote: "What is for you the best of this products (and the main differences ?)." }-

Hi iphone. All of the mentioned sandboxes are good and each works a little different. It's probably important to let us know what you normally do with you computer and if the user/s are computer literate. For example, if you have other people using the computer that are newbies, then one of the policy based sandboxes might work well in your situation.

You might also consider SafeSpace and as far as I know it's free. No matter which you decide to go with, spend a little time learning about the program, how it works and it's settings.

[MikeNAS]

I'm using DefenseWall and Sandboxie. Perfect combo.

[ErikAlbert]

How do you combine DefenseWall & Sandboxie ?
Run DefenseWall as a sandboxed application in Sandboxie OR
run Sandboxie as an untrusted application in DefenseWall ?

[EASTER]

Looks like the latter would be more safe but i'll let MikeNAS answer that.

Because to me anyway it seems if you run SandboxIE as untrusted in DW you're double protected in event of anything clever that would climb out the Sandbox.

Good question though and MikeNAS goes to extremes in security setups that i like. Got a lot of useful pointers from him how to configure SandboxIE. LoL

[farmerlee]

-{ Quote: "How do you combine DefenseWall & Sandboxie ?
Run DefenseWall as a sandboxed application in Sandboxie OR
run Sandboxie as an untrusted application in DefenseWall ?" }-
When you run a sandboxed web browser, defensewall automatically runs the browser and sandboxie as untrusted.

[MikeNAS]

-{ Quote: "How do you combine DefenseWall & Sandboxie ?
Run DefenseWall as a sandboxed application in Sandboxie OR
run Sandboxie as an untrusted application in DefenseWall ?" }-

I run most of my programs inside of Sandboxie and same time untrusted with DefenseWall. DefenseWall is outside of Sandboxie and Sandboxie is trusted program in DefenseWall. Not sure if this is best way to use both?! Actually haven't even tried to use any other method :D I trust 100% to those programs.

With this way Sandboxie and DefenseWall protects my personal data so there is double protection. If I sometime want to recovery something to my real machine then it's still untrusted via DefenseWall. Of course I can run it inside of Sandboxie too. Again double protection.

With newest DW and it resource protection combination is even stronger. I can add what ever I want to in that list. Only specified untrusted process can access to those files so now I don't have to play so much with Sandboxie ClosedFilePath.

Best of all is that DW offers very good system file protection and awesome roll back feature.

After all one is enough(?) but I'm happy with both :argh:

[CircleGirl]

SBIE has proved itself to my satisfaction without any slowdown at all. I will probable try out GeSWall as it comes with poster recommendations.

Remember to use the customary anti malware apps in conjunction with SBIE for better performance--catch a virus and thus prolong surfing without resetting/rebooting.

[MikeNAS]

-{ Quote: "When you run a sandboxed web browser, defensewall automatically runs the browser and sandboxie as untrusted." }-

I'm gonna test that solution on next weekend. If everything working fine then I switch to that. With that way I can set up nice SB file protection via DW resouce protection. I have feeling that Sandboxie is trusted in my DW list but I have to check that later.

[Reimer]

-{ Quote: "Not quite true. For most of what I download I just recover it, and I don't worry, but if I am suspicious I right click it and run it in a separate sandbox, that allows no internet access. Then if it's good fine, but if not I just clean sandbox and delete the file." }-

That's true. It slipped my mind. Still, I've been quite happy so far when DefenseWall. I like SandboxIE but it's definitely not for everyone.

[Franklin]

I am a Sandboxie fanboy which I have been using/beta testing since about version 1.6 and suits my needs just fine.

Defensewall and Geswall are excellent security apps and may I suggest any newcomers to these three apps to toss a coin as to which one to try first.

SafeSpace could also be included.

[ErikAlbert]

Farmerlee & MikeNas,
Thanks, I will look in this. I also have a paid version of each and I also believe that this is a stronger protection. After all they use a total different method and won't conflict with eachother.
The more malware I kill immediately, the better. ;D

[demoneye]

i didnt read all thread in here coz i HARD VOTE for sandboxie.
the best from all its kind software , give user all he needed + much more after deep in and learn it ;D

cheers :dry:

[Ilya Rabinovich]

-{ Quote: "Defensewall is good but I can never can get it to work correctly for me, which means the issue is on my side." }-
Then why you never asked for support? You know, I can't fix things I know nothing about. My support e-mail is well-known, so- welcome and lets find out what is going on.

[EASTER]

@Ilya

In your expert opinionIs it beneficial to use DW as a first line of defense and then add sandboxIE within DW for an eVen more secure protection strategy?

Seems like lto me ike that would be the best strategy.

EASTER

[iphone]

Thank's to all for your help.

I see that each software are good software.

I have look on each software (on the web site).
I undestand GsWall (policy restriction)
I undestand Sandboxie (Sandbox for "write" access ...)

I have look to defensewall too but i am not sure to understand how defensewall protect computer.
Is it a "sandbox" like sandboxie or a policy restriction like Gswall or a mixed ?

I see that Defenswewall track registry, files ... and can rollback !

(Thretfire do that too if i understand)

I have read many post on Wilders and all says that Defensewall is a good product.

I just want to understand the + of DefenseWall.

[Ilya Rabinovich]

DefenseWall is a pure policy-based sanbox (its registry virtualization part is so little you may forget about it). It's working on driver-lever pre-defined security ruleset (allow-deny) + new resource protection section (granular resources access to protect your sensitive information from being hijacked). Its rollback feature is limited (it can't rollback files modified) and, mostly, made in order to allow advanced users manually remove malware from hard disks.

[EASTER]

Ilya

Is it in your opinion redundant or would the favor of an addition of adding SandboxIE as an additional security measure be redundant or add another safe advisement to increase security?

EASTER

[Ilya Rabinovich]

-{ Quote: "[B][COLOR="Orange"]Is it in your opinion redundant or would the favor of an addition of adding SandboxIE as an additional security measure be redundant or add another safe advisement to increase security?" }-
Well, to tell the truth- I don't know. If you feel yourself more safer running both- why not? As about other security products- AV scanner could be useful for many users.

[Huupi]

-{ Quote: "Well, to tell the truth- I don't know. If you feel yourself more safer running both- why not? As about other security products- AV scanner could be useful for many users." }-

In a general sense a developper should know about past and current treats and act accordently in developping his software,stating that ''I don't know'' is at least doubtfull remark.

To be on top of the ever evolving security business a developper should be in touch with the other solutions provided and exactly can differentiate between them and see where they supplement each other or where they are overkill or redundant if used at the same time.
So Sandboxie and DefenceWall targed the same kind of treats but in a different way and to hear you saying that '' If you feel more safe '' is quite a statement that is useless in helping the questioner ! ;)

[Peter2150]

-{ Quote: "Very good and accurate advice. That's the best way to utilize it and for them both together with DW it's a bonus.

I'm not sure how Run Safer (OA) & DW would do together, perhaps Peter2150 can weigh in on that particular combo if it's useful or redundant or not.

EASTER" }-

Easter, I would say OA Run Safer and DW should work well together all though somewhat redundant. I run OA Run Safer and Sandboxie together, and it works fine. Redundant in protection, but I like the fact Sandboxie makes the stuff go away.

Pete

[aliennode]

Can someone post step by step tutorial how to configure Sandboxie and Defensewall?
What to actually configure

[hammerman]

-{ Quote: "Easter, I would say OA Run Safer and DW should work well together all though somewhat redundant. I run OA Run Safer and Sandboxie together, and it works fine. Redundant in protection, but I like the fact Sandboxie makes the stuff go away.

Pete" }-
Easter,

I had a problem using SandboxIE when it was combined with OA and DefenseWall. I had to abandon DefenseWall in the end.

[aigle]

-{ Quote: "Ilya

Is it in your opinion redundant or would the favor of an addition of adding SandboxIE as an additional security measure be redundant or add another safe advisement to increase security?

EASTER" }-
Add all of them: GW, DW, SBIE and BZ.

It will increase the security greatly. Nothing will be able to execute, i hope. :)

[Franklin]

-{ Quote: "Can someone post step by step tutorial how to configure Sandboxie and Defensewall?
What to actually configure" }-
You could try their websites.
Defensewall Help (http://www.softsphere.com/online-help/defensewall/)
Sandboxie FAQ's (http://www.sandboxie.com/index.php?FrequentlyAskedQuestions)

[CogitoErgoSum]

Hello MikeNAS,

I have noticed in your signature that you are running Shadow Defender(SD) alongside DefenseWall(DW). FYI, according to the link below SD is known to conflict with DW. For that reason and having experienced some conflicts myself, I have temporarily uninstalled SD and have replaced it with Returnil 2008 Personal Edition(free) for malware testing purposes.

http://shadowdefender.com/download.html


Peace & Gratitude,

CogitoErgoSum

[Kees1958]

Could somebody please tell me how I can run DefenseWall, GeSWall, ZoneAlaram Forcefield, Bufferzone, Sandboxie, SafeSpace, Virtual Sandbox, Returnil, ShadowServer, PowerShadow, Altris, Windows Steady State, Virtual Box, Virtual PC2007, VMware together with OA runsafer and EQSecure Sandbox?

Im am not paranoia, just carefull. Any tips to increase the security of my anti-malware multi multi multi multi multi layered setup would be appreciated. I am sorry to hijack this topic OR is nearly the same as AND.

By the way I have 80486 PC with 64MB ram

Thanks

[farmerlee]

-{ Quote: "Farmerlee & MikeNas,
Thanks, I will look in this. I also have a paid version of each and I also believe that this is a stronger protection. After all they use a total different method and won't conflict with eachother.
The more malware I kill immediately, the better. ;D" }-
Plus it helps to save time as you don't have to reboot your computer to clean your system after browsing.

[WilliamP]

My suggestion is to load everything ,re-boot and stand back.

[Franklin]

Um err Kees, I don't see any blacklist scanners in your list.::)

Maybe add SAS and Kav realtime and another stick of ram! ;D

[Kees1958]

-{ Quote: "Um err Kees, I don't see any blacklist scanners in your list.::) " }-

I do not need a blacklist scanner, I have created a black hole for malware with all these sandboxes and although it is virtual I know where my PC is, so no need to scan where it is.

By the way my high speed cable connection is working flawlessly, I can see the pixels loading. Did you know that with this incredible build up I can even read the hidden morse code of the screen pixels!

P - A - R - A - N - O - I - A

8)

[LoneWolf]

-{ Quote: "yeah, Avira and Sandboxie are a better combo. Still my all time favorite for detection, protection and lightness. Defensewall is good but I can never can get it to work correctly for me, which means the issue is on my side. Geswall will slow down over time without a reboot and Sandboxie may slow browser just a tad." }-

Whatever works. ;D
Thats why theres so many differant setups here.
GesWall has never slowed down my pc.
I had problems myself with earler versions of DefenseWall, but 2.3 and then upgrading to 2.4 is working flawlessly. :thumb:
Sandboxie may slow opera from starting a few seconds here, but after i'm online thats where the slow down stops. Lightning fast. At least here it is.

[MikeNAS]

-{ Quote: "Hello MikeNAS,

I have noticed in your signature that you are running Shadow Defender(SD) alongside DefenseWall(DW). FYI, according to the link below SD is known to conflict with DW. For that reason and having experienced some conflicts myself, I have temporarily uninstalled SD and have replaced it with Returnil 2008 Personal Edition(free) for malware testing purposes.

http://shadowdefender.com/download.html


Peace & Gratitude,

CogitoErgoSum" }-

I know that but I don't have any problems... Can you tell more?

[aliennode]

Do I just have to close a Sandboxie browser after use or have to select delete contents after using a browser each time?

[CogitoErgoSum]

-{ Quote: "I know that but I don't have any problems... Can you tell more?" }-

Hello MikeNAS,

When I was running SD alongside DW, I experienced excessive hard drive activity, above average to excessive registry and file fragmentation and some file corruption(had to run CHKDSK). While I can not confirm as I do not have it installed, it is possible that SD may interfere with DW's protection functionality.


Peace & Gratitude,

CogitoErgoSum

[LoneWolf]

-{ Quote: "Do I just have to close a Sandboxie browser after use or have to select delete contents after using a browser each time?" }-

Just check the box and don't forget to hit apply.
When you close your browser the contents of the sandbox will be gone.

[aliennode]

Hey
I cannot save pictures while in Sandbox browser
How do I save pictures to desktop or to my pictures folder while in Sandbox browser please?

[trjam]

It will save them. When you close your browser it should pop up asking you if you wish to save if you have selected the option in Sandboxie.

[aliennode]

-{ Quote: "It will save them. When you close your browser it should pop up asking you if you wish to save if you have selected the option in Sandboxie." }-
Whereabouts is that?
Also Ifound my logins are not being saved ??????

[LoneWolf]

-{ Quote: "Hey
I cannot save pictures while in Sandbox browser
How do I save pictures to desktop or to my pictures folder while in Sandbox browser please?" }-

You can check the box for immediate recovery.

199980

Of course if your unsure if something in your sandbox is nasty or not I would
(and I do) scan the questionable object with all on my pc as well as with VirusTotal.

[LoneWolf]

-{ Quote: "Whereabouts is that?
Also Ifound my logins are not being saved ??????" }-

Yes, because the changes you made was in the sandbox, close sandbox, all gone.
The only way around this that I know of is to go to the sites you need to log in without sandboxie,save your logins, then you can go back sandboxed after that and they should be there.

[subset]

Hi,

time for dumb (down) questions.
If I use Firefox and SB: Do I still need this NoScript Addon for FF?

Because currently I have only allowed under Direct File Access:
OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\*.default\prefs.js
OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\*.default\bookmarks.html
OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\*.default\sessionstore.js
OpenFilePath=firefox.exe,%AppData%\Mozilla\Firefox\Profiles\*.default\adblockplus\patterns.ini

And does this automatic deletion (AutoDelete=y) make any difference related to NoScript?

Cheers

[aigle]

-{ Quote: "Yes, because the changes you made was in the sandbox, close sandbox, all gone.
The only way around this that I know of is to go to the sites you need to log in without sandboxie,save your logins, then you can go back sandboxed after that and they should be there." }-
No, I think u can put exceptions.

[LoneWolf]

-{ Quote: "No, I think u can put exceptions." }-

And where can one find this?

[aigle]

Sorry LoneWolf, I misunderstood logins as bookmarks. I can,t say for sure as I don,t use SBIE but stiull I think you might do it. ISBIE has a lot of options to configure for the power user.

Did u check their forums?

[LoneWolf]

-{ Quote: "Sorry LoneWolf, I misunderstood logins as bookmarks. I can,t say for sure as I don,t use SBIE but stiull I think you might do it. ISBIE has a lot of options to configure for the power user.

Did u check their forums?" }-

No, as I have zero problems with Sandboxie or with any other apps for that matter.
I only asked as alienode was having problems with logins.
Thanks though. ;D

[MikeNAS]

-{ Quote: "Farmerlee & MikeNas,
Thanks, I will look in this. I also have a paid version of each and I also believe that this is a stronger protection. After all they use a total different method and won't conflict with eachother.
The more malware I kill immediately, the better. ;D" }-

Okay. I have tested now to run Sandboxie untrusted via DefenseWall. I choose that all Sandboxie application files (8x *.exe) except SbieSvc.exe (Service) are untrusted. Simple reboot and voila! Sandboxie is now untrusted and best part is that if I run anything inside of Sandboxie it's same time untrusted via DW (untrusted application starts process). Working 100% in my comp!

[ErikAlbert]

-{ Quote: "Okay. I have tested now to run Sandboxie untrusted via DefenseWall. I choose that all Sandboxie application files (8x *.exe) except SbieSvc.exe (Service) are untrusted. Simple reboot and voila! Sandboxie is now untrusted and best part is that if I run anything inside of Sandboxie it's same time untrusted via DW (untrusted application starts process). Working 100% in my comp!" }-
OK. I already copied your post in my installation files. As soon I have the time I will combine both this way. Thanks.

[MikeNAS]

-{ Quote: "OK. I already copied your post in my installation files. As soon I have the time I will combine both this way. Thanks." }-

No problem. You're welcome!

[aliennode]

I have Avast antivirus with Superantispyware with Windows Defender and Sandboxie
I just installed third party Windows firewall control and it significantly slowed my laptop down. So I uninstalled it.
Now I am worried that Windows Defender is not working properly after installing and uninstalling the third party firewall control
How do I findout if everthing is same and configured OK as before installing uninstalling the tihrd party firewall control??

I did not configure the firewall control very much to be honest as I just installed it and know not much about it. Only enabled Avast and Explorer browser

[soccerfan]

-{ Quote: "Okay. I have tested now to run Sandboxie untrusted via DefenseWall. I choose that all Sandboxie application files (8x *.exe) except SbieSvc.exe (Service) are untrusted. Simple reboot and voila! Sandboxie is now untrusted and best part is that if I run anything inside of Sandboxie it's same time untrusted via DW (untrusted application starts process). Working 100% in my comp!" }-
Hello MikeNAS,
Is the file start.exe in the sandboxie folder also set untrusted in DW?

soccerfan

[Beavenburt]

-{ Quote: "Could somebody please tell me how I can run DefenseWall, GeSWall, ZoneAlaram Forcefield, Bufferzone, Sandboxie, SafeSpace, Virtual Sandbox, Returnil, ShadowServer, PowerShadow, Altris, Windows Steady State, Virtual Box, Virtual PC2007, VMware together with OA runsafer and EQSecure Sandbox?

Im am not paranoia, just carefull. Any tips to increase the security of my anti-malware multi multi multi multi multi layered setup would be appreciated. I am sorry to hijack this topic OR is nearly the same as AND.

By the way I have 80486 PC with 64MB ram

Thanks" }-

:argh:

I love sarcasm.

[MikeNAS]

-{ Quote: "Hello MikeNAS,
Is the file start.exe in the sandboxie folder also set untrusted in DW?

soccerfan" }-

Yes it is. You can remove that control panel in untrusted list if you have some problems.

[soccerfan]

-{ Quote: "Is the file start.exe in the sandboxie folder also set untrusted in DW?" }-
-{ Quote: "Yes it is. You can remove that control panel in untrusted list if you have some problems." }-
Thanks! I'll give the combo a try (I have DW but use only sandboxie at the moment).