GesWall, BufferZone and SysWatch...which one?

How do you protect against infections from removable drives?

 

Could you be more specific regarding GW?
Are you saying that GW is useless on Windows XP/Vista/7/8 because it protects against old type of malwares?

 

A question about GeSWall, I'm currently looking into GeSWall and DefenseWall for a older system of a friend and an old system of mine and found this page:
http://www.brighthub.com/computing/smb-security/articles/55807.aspx

Which states about GeSWall:

Does anyone have any detailed info about this, I read their individual reviews about GeSWall and Defensewall, but there is nothing about this in it.

 

When a file with an untrusted token was moved it could lose the untrusted status and then it became uncontained. Defensewall maintains untrusted status unless the user specifically trusts it on purpose.

 

Yes, I read about that, but that is what they mean with "total untrusted file control", I mean what they are saying with "nor is it capable of defending from higher level of intrusions."

 

I already knew about this link you posted, but like you I'm also waiting for someone to explain this more thoroughly and if this is true or false, of course.

 

I wrote about it two years ago to the GW developers, and they answered to me that it's an intentional feature: if you move a file it means that you anyway already trusted it.

 

Does anyone know how GeSWall handles dll injection? I read that with DefenseWall when an untrusted process injects a dll into a trusted process, that becomes untrusted as well, but I coudn't find any info on how GW handles this.

 

http://www.gentlesecurity.com/protectnetwork.html

 

Based on this can GesWall free or pro actually replace inbound firewall (xp, windows7, vista, 32-bit)?
Does it mean GesWall is actually more secure than Sandboxie, because SBIE cannot replace any firewall with inbound protection?
Because as far as I know SBIE does not block this?
But if it can be configured in SBIE than both SBIE and GesWall are equally secure?

 

The work of a sandboxing programs like GW or SB is not to replace the firewall, but to enhance the security with a new protection level. More, a sandboxing program is a protection against malwares that try to execute from web pages and other sources.

 

One can set allowing "Resource Access Rule" for network but I think it's rather in/out rule and it's not possible make only out or only in rule...look at this screen
-http://i.imgur.com/nil7Y.jpg?3924

 

Thanks