It's not a standalone firewall, it controls the Win Firewall. And it gives you a bit more info about connection history, personally I don't really need it, but it can be handy sometimes. Here are some reviews: http://www.snapfiles.com/get/glasswire.html
Pro version activated, and then they spam you to upgrade to elite, while the program is running. I can understand doing that in the free version but not in the over-priced "Pro version" Back on the shelf to collect dust.
Sometimes I wonder if they are their own worst enemy, with this, and pricing decisions. That said, I was fortunate to pick up a good Elite offer, and it is a 'nice' soft.
I posted way back https://www.wilderssecurity.com/threads/glasswire.367435/page-11 #268 too many out-bound connections, guess I was right right (phoning home).
Saw that post, but I still don't know what outbound connections you are referring to other than those mentioned in post #272 (neither do others, see posts following yours, up to #286).
You can make Glasswire block itself in the firewall section. I block it no issues. They even said if we wanted too no problem but you just won't get update notifications.
(using the free version) I see outbound attempts to glasswire.com, update.glasswire.com and activate.glasswire.com. On installing [19/01/2019] [12:07:27] Denied TCP 54.230.3.242 gwinstst.exe PID:4688 [19/01/2019] [12:07:34] Denied TCP 35.168.155.58 gwctlsrv.exe PID:2948 [19/01/2019] [12:07:35] Denied TCP 54.230.3.242 gwctlsrv.exe PID:2948 [19/01/2019] [12:07:48] Denied TCP 54.230.3.111 gwinstst.exe PID:4688 [19/01/2019] [12:07:56] Denied TCP 52.204.79.212 gwctlsrv.exe PID:2948 [19/01/2019] [12:07:57] Denied TCP 54.230.3.111 gwctlsrv.exe PID:2948 [19/01/2019] [12:08:09] Denied TCP 54.230.3.82 gwinstst.exe PID:4688 [19/01/2019] [12:08:17] Denied TCP 54.230.3.82 gwctlsrv.exe PID:2948 [19/01/2019] [12:08:30] Denied TCP 54.230.3.234 gwinstst.exe PID:4688 [19/01/2019] [12:08:38] Denied TCP 54.230.3.234 gwctlsrv.exe PID:2948 Restarting gw service [19/01/2019] [12:41:29] Denied TCP 52.204.79.212 gwctlsrv.exe PID:5736 [19/01/2019] [12:41:50] Denied TCP 35.168.155.58 gwctlsrv.exe PID:5736 Restarting gw service again [19/01/2019] [12:53:03] Denied TCP 35.168.155.58 gwctlsrv.exe PID:2656 [19/01/2019] [12:53:25] Denied TCP 52.204.79.212 gwctlsrv.exe PID:2656 glasswire.com 54.230.3.242 54.230.3.111 54.230.3.82 54.230.3.234 update.glasswire.com 35.168.155.58 52.204.79.212 activate.glasswire.com 52.204.79.212 35.168.155.58 It's been running for over an hour now and I haven't seen any further outbound attempts, just the initial two on service start (presumably checking for update/license?). I'm not sure if further connections would follow if it was actually able to connect out, but if not it seems relatively quiet to me. Edit: Nevermind, just had further connection attempts to activate.glasswire.com without a service restart.
Thanks for the info. Presumably (hopefully), the further attempted connects to activate.glasswire.com would be absent in the paid version.
Not sure what happened the first time, but I'm now seeing outbound attempts every 30 minutes exactly. It's possible this is caused by me blocking gwctlsrv.exe from connecting out, causing glasswire to keep retrying every 30 minutes until it succeeds.
On my daily GlassWire logs I see connections to "activate.glasswire.com" (IP "35.168.155.58" at Amazon Technologies), and "ghs-svc-https-c46.ghs-ssl.googlehosted.com". The second one is for the VirusTotal lookup service integrated with GlassWire. https://www.glasswire.com/host/74.125.34.46
It's a competent mouse-click allow/block for connected applications listed in the GW GUI. Rules appear in Windows Firewall as {Glasswire.app.in_111} and app.out_ where in the rule Properties > Programs and Services > This program the app exe is shown. One can still create rules as I have, for example blocking "everything" in and out for my ancient no-WiFi smart HDTV and Blu-ray player. And it gives you tons of connection info, real time and history. The "worth it" is up to you, but consider when they are enabled in Settings, these GW features will alert to: Things monitor - devices joining or leaving First network activity - self explanatory System file monitor - changes to hosts and lmhosts Device list monitor - network device or driver added, changed or moved Application info monitor - changes to version, publisher, certificate or executable While you were away - "a brief summary of any significant network activity that occurred while the computer was idle" ARP Spoofing detection - self explanatory Proxy settings monitor - changes to settings DNS server settings monitor - changes to settings Internet access monitor - if internet connection was disconnected or reconnected Suspicious hosts monitor - self explanatory WiFi evil twin alert - suspicious WiFi connections You can also enable GW's Virus Total feature for a right-click on-demand scan of logged apps or "Automatically analyze all apps with network activity."
I've been using GlassWire since 2014 starting with Free and worked the way up from a Basic lifetime purchase, $24.50, in 2016, and then Pro and Elite by way of nice upgrade offers via email, $25 and $20. The licensing remained at lifetime. Anyhow, I run GW on two Win7 and two Win10 systems. A quick check on one of each, going back a year, the only outbound logged in GW and my network logs is for the GlassWire Control Service (gwctlsrv.exe), once daily when I bring 'em out of hibernation. Up and down, kbs in the single digits. Never got any "spam."
Don't know. Never uncheck that option. It's a keeper!!! One of the best features in GlassWire, IMO. I'm a hardcore VirusTotal user, and I rarely let anything install or run on my computer that hasn't been run through VirusTotal first. GW scans any programs that auto update for me, so I don't need to bother manually checking the auto updates (AV's, Dropbox, browsers, etc.) every time they update. So that way I know that every process and application that accesses the net is clean. Peace of mind, pure and simple!
No arguments there! Since I'm not using it and don't get the VT connection, I answer my own question. Wish I could do that when I forgot why I walked to the other side of the house. I'm good with VT and got me a public key to plug into HitmanPro when I used it a couple-three years ago. I don't use the feature full time in GW but did play with it for about a month when it was first introduced. And last year when I set up my second Win10 box, GW was the first thing installed and I ran it in "analyze all apps" mode during installs and first runs of a bunch of other apps. Needless to say, it got crazy busy. I was amazed at how fast, unobtrusive and stable it is. VT's API and GW's integration are both equally impressive.
Yes good point, it does more than simply displaying network connection history, so good to mention. But it's way too expensive if you ask me.
I agree that their current pricing structure is a bit extreme. Maybe GW will eventually figure out that it's easier to sell 100 @$1 items, than to sell 1 @$100 item.
LOL! After the pop-up, I saw a message that 825 people claimed this discount today! Maybe that will encourage them to offer more specials!
Maybe 825 is just a random number, just for marketing purposes. They probably already have 1 million downloads a day and 7 billions users