Online Armor run safer option

[acr1965]

Anyone want to share their experiences using the OA "run safer" option? Also, if a browser is in "run safer" and the browser downloads something from the internet, will the downloaded file be in "run safer" by default? ie- drive by download, etc

thanks

[Cutting_Edgetech]

Originally Posted by acr1965

Anyone want to share their experiences using the OA "run safer" option? Also, if a browser is in "run safer" and the browser downloads something from the internet, will the downloaded file be in "run safer" by default? ie- drive by download, etc

thanks

It is my understanding that applications that are configured to run safer are in essence runned sandboxed using software restriction policies as defined in advanced options. So it should protect you from drive-by downloads if configured properly. If you download an infected file through your browser, and then choose to execute that file then you will still get a prompt from OA asking you to allow or deny an action from that file. If you choose to allow it then of course you will still get infected.

[Page42]

When a program is running using RunSafer, any other program that is launched by this program will also 'inherit' the Limited user account restrictions.

- excerpted from OA's RunSafer Webhelp article

You could use a tool like ProcessExplorer to confirm that the RunSafer security is in place for a given process.