WSA Official Release...Questions.

Figured I would reply here rather than start a new thread...

One thing I wanted to bring up is the general level of necessity for purchasing a 3rd party software firewall (perhaps with "enhanced" capabilities) to replace (or in Webroot's case supplement) Windows Firewall.

The argument back in Windows XP SP2 used to be that their firewall only was inbound, and that users should purchase a 3rd party firewall that offered two-way protection instead. However, there were a lot of security experts that still disagreed with this, claiming Windows XP's firewall was robust enough as long as the user followed other safe guidelines (i.e. limited user account).

Another claim I've heard a lot is that 3rd party software firewalls were not worth the price and trouble to configure for the level of inconvenience (annoying prompts) they might invoke. Obviously, I highly, highly doubt this will be an issue with Webroot's smart firewall, nevertheless...

One of my favorite authors, "mechBgon," when discussing Windows XP SP2's basic firewall, makes the claim that outbound firewalls are historically easy to fool anyway, and that it is a better tactic to focus on keeping tight control over what is installed on the computer in the first place. He cites this article: http://www.computerworld.com/s/arti...indows_Update_s_downloader?source=rss_topic85

I of course completely understand that Prevx/Webroot is completely different technology altogether, and even the firewall is different--it is a "firewall enhancement" so to speak, which I particularly like. I want to commend the team for creating this new approach. It is better to enhance something that is already solid, the Windows Vista/7 firewall (which is two-way now of course), rather than replace it altogether and potentially use more resources.

So where I'm going with all of this....

However, I still find myself wondering, what exactly is Webroot's firewall enhancement designed to protect/prevent that the default Windows Vista/7 firewall would NOT, assuming it is paired with UAC to protect setting integrity and set to public network?

I understand you guys have a product to sell, I'm just wondering! I have to also commend Microsoft for significantly enhancing the built-in firewall as well.

 

Droppers, Loaders, and some annoying things that get past UAC and/or take advantage of new or unpatched security holes. For the "Super-Safe" user, it might never provide a benefit, just like the expert tightrope walker who never falls is unlikely to hit the safety net year after year... But if/when they do fall, the safety net is damn good to have.

"Block all network access from unknown applications when infected" or even all of them when you just think you may be infected.

Also remember that not every user of the product uses "best security practice". Heck, some even use "Worst security practice" (OMG!! Stop saying two_girls.avi.exe is a virus!!! I want to see the video you stupid program! *Ignore Infection/Do Not Quarantine*).

 

This is why I like Webroot/Prevx's approach to focusing on hardening the existing firewall instead of engineering a replacement firewall and making (I personally believe often false) claims that it is infinitely better than Windows Firewall.

Firewall tends not to be like antivirus--there are only so many ways to go about it. We could compare antivirus products all day and the range of effectiveness would be all over the charts; with firewalls however, I believe that Microsoft made the firewall more than sufficient in Windows 7.

My advice to people that are really hardcore on the "layered approaches" to security is to first understand and try to utilize what Windows has already built into it before going out and installing a bunch of products on your computer. I've seen people running Prevx, a traditional free AV, a HIPS product like Comodo, and a 3rd party firewall, AND PeerBlock, AND and an anti-executable. A lot of that may be unnecessary if all the Windows security functions were utilized in the first place, instead of throwing all that stuff on an admin account and turning "annoying" UAC off.

Kind of a Catch 22.

 

A very good set of suggestions here. I agree - Microsoft has done a great job with the Windows firewall. And TonyW's observations of the Webroot firewall are exactly correct

 

Thanks very much!!!

Sorry I probably got a bit off topic for this thread here; I can't help myself sometimes...I just start typing. I should focus that energy on my coursework and research papers!

EDIT: I also want to establish that I would 100% trust Prevx 3.0 to be my only real-time anti-malware solution. I chose to use it with MSE (previously ESET when I already had an existing license) for defense in depth, and because they seem to work well together and use in combination not nearly as much RAM as one might think when I say "I use two AVs!" I list Sandboxie as "resident" on my signature but I only load it when I'm using a sandbox for browsing, high risk apps, etc.

 

I also think it's about time to give Joe and the rest of the Prevx mods here a big apology for the whining and OMG NOs that I did back when the "Webroot Acquires..." post came around.

You were right Joe, as always. A wonderful product has been created!

 

HelloJoe

As you suggested in this post' reply... i got back to PrevX3 SOL with my valid licence.
What a nightmare! IE9 opens and a message pops up "IE ceased functionning"
IN FF latest OfFicial many add-ons don't work anymore etc....
Sorry if i disturb you again but to help your team to easily upgrade and switch to WSA.. i hesitate going on like this..
Do you think we'll have to wait long...?
Thanks.

Cheers,
Herve

 

I agree Heco. I think it's ridiculous to recommend that loyal users "regress" to Prevx 3.0 at this stage. They have known about this transition for nearly a year now, and even back in June were speaking of migrating Prevx users to WSA here ( in #1 ). https://www.wilderssecurity.com/showthread.php?t=301207
How long does it take, and how long do they expect paying customes to wait and remain patient and loyal

 

Hello Dermot! ;-)

...until their valid licences have expired... without compensation ? LOL

Cheers,
Herve

 

I'm happy using Prevx 3.0 and NIS 2012, no upgrade required here thank you. However should I be offered an upgrade which would consist of a Prevx 4.0 and the joint editors choice NIS 2012 I would accept willingly

 

All Prevx 3 users will be migrated to WSA [which is essentially Prevx 4] once the transition of licences from one to the other has been finalised.

@Dermot7: I don't think it's as simple as what we'd like it to be since they're dealing with two different product bases i.e. Webroot's own customers and Prevx's. One set has to be done first. The two products are both working on different licencing systems and, therefore, it must be a quite a huge task to bring it all under one roof so to speak.

 

I have reinstalled WSA Beta 80060 after a clean uninstall of PrevX SOL 3... Sorry Joe but i couldn't do otherwise!
Now.. I have just tried to set up my account through the the main GUI of WSA and no licences are accepted (the Beta licence or the still current PrevX3 one). I wonder HOW you will determine that i am a valid PrevX3 customer...during the upgrade process... That intrigues me!

Cheers,
Herve

 

@TonyW...Yes you are, most likely, correct, and I suppose I'm just getting a bit frustrated about the whole thing. I know it will work out fine eventually, and shouldn't lose confidence in the product which is obviously the best, with the most kind and helpful lead developer.
However, must say that Webroot is a big company (3rd largest AV Co in US?) and the planning seems to be somewhat lacking. Thanks

 

When I asked Support about using the beta licence key at webrootanywhere.com, I was advised that website can't be used with the keys issued for the closed beta. It's complicated, and probably wise not to set up an account with the beta licence key.

It won't recognise the Prevx 3 licence key most likely because that is still on the Prevx server system until it gets ported over, and possibly changed, to work with the overall Webroot system.

 

Exactly as Tony said, and just to try I did and it didn't work so just have alittle more patience and they will make things aright!

TH

 

It was understandable.A lot of vintage Prevx users,myself included,were concerned for the future direction of the project;fearing it'd be "asset stripped" and then dumped by Webroot.Thankfully it looks to be in safe hands.

 

I know it's frustrating and believe me, I can see the volume of posts from people complaining here. However, there are only so many hours in the day and despite Webroot being a large company, there is only so much we can do at once. We made the decision to release the product under the Webroot brand and keep Prevx users separate initially as doing otherwise would delay the update for Prevx AND Webroot users by a couple months.

Frankly, besides the users here, I'd guess that very few other Prevx users actually even know Prevx was acquired by Webroot. We need to make the transition between P3 to WSA very methodical. The current Webroot eCommerce system needs to support the vast number of combinations of Prevx licenses, we need to support the very large userbase of Prevx coming into our databases with brand new software, we need to be sure that the product is field-tested as stable to support it being released as an update over existing users, we need to further improve the uninstall process of P3 to WSA to prevent some kernel-level incompatibilities, and we need to have all of the license keys and business logic transitioned to be able to support upgrading/migration of users.

It is really not a straightforward set of tasks and we aren't keen to cause any problems for our existing users who have been sitting fine and happy for quite some time now.

We're first focused on upgrading the current Webroot users automatically (a much larger userbase), then we will be working on the Prevx-to-Webroot transition.

Again, I'm sorry for the delay but it is inevitable considering the volume of change on not only the client, but database/webserver/website/infrastructure/business logic.

 

Good Evening ! When is Prevx 3.0 with Safe On Line to be officially phased out as a product by Webroot ? And will WSA have a feature resembling Safe On Line? I currently have thirty two days remaining in my existing Prevx license,any special pricing being offered to new WSA users ? Can anyone from Webroot provide existing Prevx users with a definite release date? Sincerely...Securon

 

@PrevxHelp...Thank you very much for that thorough explanation and insight. Phew! Make sure you get enough rest for yourself as well! Dermot

 

From PrevxHelp in post #92:

Once that is done, I think you can safely say Prevx 3 as we know it will cease to exist. There is no specified time of when this'll be completed. I expect it depends on how well the Webroot transitions go.

WSA [Essentials and Complete] already include the newer version of SafeOnline.

 

Should WSA Antivirus display a lock icon in the taskbar similar to Essentials and complete?

 

In a way I don't mind the wait....it'll give some time for any bugs to be worked out of the final product, not that there are any...

I'm curious though, and I understand if it is not possible to say at this point, but do you think the roll-outs to current Prevx customers will be in the near future, between now and the end of November, or are we talking about 'till Christmas or maybe even into 2012?

 

Thank you Joe for your humble, open-minded and thorough reply! I do apologize for "whining" as many of us did...
As far as i can see, YOU and Triple Helix too are in the same situation as we, all "loyal" (LOL) PrevX users, are.

Cheers,
Herve

PS: When Webroot "acquired" (sorry for the banned use of this word!LOL) PrevX, in the contract, there should have been a clause or a stipulation giving a priority to PrevX users for the transition! LMAO (Bad french sense of humour!)

 

If I have Prevx 3 what Webroot product will I be upgraded to?

 

No as it does not have Identity & Privacy Protection! The lock in the tray Icon only shows up in WSA-E & WSA-C when a supported browser is protected!

HTH,

TH